WeblateOrg / WeblateOrg/weblate

Limit user visibility to collaborators

Open
#18,054 12 comments 0 reactions 1 assignee Claimed by @amCap1712 View on GitHub
Area: Auth Waiting for: Implementation
Dominant language
Python
Stars
6.1k
Forks
1.4k
Avg merge
9h 53m
Merged PRs (30d)
395

Description

### Describe the problem

Hello Weblate community,

we run a shared Weblate instance for multiple independent organizations / customers.
Permissions and repositories are separated, but the global user directory (the `/user` endpoint) shows all users to everyone. It is also problematic that *all* users could be suggested when typing in a comment and starting to type a `@username`.

We would like users to see only people they actually collaborate with (same project/repository or direct interaction), while others remain hidden.
As we operate in the EU (Germany), GDPR requirements force us to apply strict visibility minimization.

### Solution brainstorm

#### Solution 1

Only show users in the users list, who have at least one shared project / repository.

Admins should be able to view all users. This could be implemented with a new global configuration option, or a new team role for viewing all users

#### Solution 2

Add an option to completely disable the `/users` endpoint and the user suggestions when typing a comment.

### Describe alternatives you have considered

Hosting one Weblate instance per customer would theoretically be possible, however, this would be a huge maintenance burden.

### Screenshots

_No response_

### Additional context

Thanks for providing such an amazing translation tool!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.