Proposal: Phase out public profile fields and profile listings
Now that SearchKit provides this functionality, we should consider deprecating "public profile fields" and profile listings. They are a recurrent source of confusion and a bad configuration can lead to a data leak (I stumble on them regularly, with the help of the symbiotic extension.
I think we should:
-
Add a feature flag (a hidden setting?) that hides -
On Profiles, the option "Standalone Form or Directory"(edit: I guess this might be needed for profile/edit of users with a checksum?) - On Profile Fields: hide the visibility options, set them by default to "User and Admin only"
-
-
Remove the feature from the Admin documentation -
Begin changing the interface to warn that we will be removing this feature, and that they can opt-in to that change right now -
Set a date for complete removal (or if someone really insists on keeping this feature, help them create an extension for it)