Skip to main content

Leaderboard Data Breach

Feature RequestImprovement

Hi Lads. I have a big issue where all my users can see all other users on the leaderboard. I thought this was supposed to be group only leader boards?? I basically cant use leaderboard functions now because they are sharing U16 and U18 data with other adult users, and data from one club with that of another. This is a major issue for me and basically makes the leaderboard function redundant. If possible coud you make it so I can filter who gets a leaderboard and who does not? Similar to how you filter who gets a wellness check-in notification. I have had leaderboards turned on for weeks now not knowing that everyone in the ecosystem can view. Only just now when I impersonated a user with the end of making a screen recording for a tutorial did I realise this massive issue exists.

Posted by Luke Smyth ·
Status: Completed7 comments

Log in to comment and vote

Comments7

  • Ryan Brereton

    Team•

    Sep 24, 2024

    Hey @Luke Smyth, I’ve just added an option to Admin > Settings > Leaderboards called “Group Privacy Mode”. When enabled, this should restrict athletes to only see fellow athletes from mutual groups.

    • Luke Smyth

      •

      Sep 24, 2024

      Ryan you are a legend! thanks so much for such a quick fix for this one. Thats mega! Cheers

      • Luke Smyth

        •

        Sep 24, 2024

        @Ryan Brereton just to note, this fix also excluded me as Administrator from seeing the group leaderboard. I need to add myself to each group to view their leaderboard. Just incase others say its not working

        • Ryan Brereton

          Team•

          Oct 1, 2024

          Thanks Luke, good catch. I’ve allowed Admins to access all leaderboards without needing to be a member of each group.

          • Luke Smyth

            •

            Oct 1, 2024

            Brilliant thanks Ryan

  • Ryan Brereton

    Team•

    Sep 20, 2024

    Thanks Luke, good catch. This is technically working as intended, as a number of teams (single age-group) want a leaderboard accessible across multiple groups. That said, I do like the idea of having a setting like notification settings to segment different leaderboards and access-rights. Going to think about some different ways we can implement this.

    • Luke Smyth

      •

      Sep 20, 2024

      Thanks Ryan. I will have to leave leaderboards off in the meantime.