Details
-
Type: New Feature
-
Status: Open
-
Priority: Major
-
Resolution: Unresolved
-
Affects Version/s: 5.4.0
-
Fix Version/s: 5.12.0-b1
-
Component/s: Client Interface, Plugins, Staff Interface
-
Labels:None
Description
Right now the support manager uses Gravatar to load any staff and client avatars, if they have been set up previously on Gravatar.
This is a problem for some, in part due to privacy concerns. (Requests from a URL for a gravatar may leak that the user has an account at such URL)
To resolve, I propose that we add both a method to disable Gravatar, and if Gravatar is disabled, allow staff and clients to set their own.
There is currently no good place for these kind of global support settings that I can think of. So I would propose we add a new "Support > Settings" page within the support manager.
On this page right now we would just have a section called Avatar and in the section a radio option for:
[ ] Use Gravatar
[ ] Use Gravatar but override if a custom avatar is set
[ ] Use custom avatar only
If Use Custom Avatar Only is selected, have an option for a "Default" Avatar, one for Staff and one for Client. If the staff or client have not set an avatar, it would fall back to this one.
Then, there needs to be a way for staff and clients to set their own avatar. This should be a separate related core task so that staff can set an avatar under "My Info" and clients can set an avatar by clicking "Edit" next to their contact details. It's important that the avatars be set on the staff and client accounts directly, so that they may be used by other parts of the system or other plugins in the future.
Requested here https://requests.blesta.com/topic/option-to-disable-gravatar-support-potential-gdpr-issue