I've added a custom field to my profiles which includes sensitive information. I have enabled only Admins to view this field.
A member who has access to profiles, but not that particular field is able to go into the Logged Activity for a particular user and see that the field was updated and can also see what was entered into the field.
This creates a security concern.
Is it possible to limit the information displayed in Logged Activity based on a user's access permissions?
Thanks for the post.
I'll look into this for you.
Just to let you know I've spoken to the developers about this. For now this is considered working as intended, as the restrictions aren't specific to the activity tab. We've filed a feature request for this though.