# אפשר להעלות אווטארים לפי רמת אמון לא עובד?

**URL:** https://meta.discourse.org/t/allow-uploaded-avatars-by-trust-level-not-working/215209
**Category:** Support
**Created:** [18 בינואר,‏ 2022,‏ 11:20am UTC](https://meta.discourse.org/t/allow-uploaded-avatars-by-trust-level-not-working/215209 "2022-01-18T11:20:13Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![tmomas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tmomas/32/109144_2.png) [@tmomas](https://meta.discourse.org/u/tmomas)
#### Post date: [18 בינואר,‏ 2022,‏ 11:20am UTC](https://meta.discourse.org/t/allow-uploaded-avatars-by-trust-level-not-working/215209/1 "2022-01-18T11:20:13Z")

</div>

Continuing the discussion from [2.8.0.beta5: PM Improvements, Unseen View, Allow Uploaded Avatar by Trust Level, and more](https://meta.discourse.org/t/2-8-0-beta5-pm-improvements-unseen-view-allow-uploaded-avatar-by-trust-level-and-more/202357):

> [@2.8.0.beta5: PM Improvements, Unseen View, Allow Uploaded Avatar by Trust Level, and more](https://meta.discourse.org/t/2-8-0-beta5-pm-improvements-unseen-view-allow-uploaded-avatar-by-trust-level-and-more/202357/1):
>
> ### Allow uploaded avatars by trust level
> 
> Previously, admins could disable support for custom, uploaded user avatars, but this would impact all users on the site. The `allow uploaded avatars` site setting now supports trust levels, enabling a site to prevent lower trust level users from uploading avatars while allowing high trust level users.

Despite this setting  
 ![grafik](https://global.discourse-cdn.com/meta/original/3X/e/4/e4290bdabe7d5231661f6cbc6c04560bc62858b9.png)

I’m seeing new users with TL0 adding their own Avatar pictures.

My understanding is that due to the above setting, only TL1 and above should be able to add their own Avatar pictures. Is my understanding correct?

If yes, what could lead to TL0 being able to add avatar pictures?

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [18 בינואר,‏ 2022,‏ 11:58am UTC](https://meta.discourse.org/t/allow-uploaded-avatars-by-trust-level-not-working/215209/2 "2022-01-18T11:58:39Z")

</div>

I’ve just had a little go on my test site (allow uploaded avatars: TL1, with a TL0 Test\_User) and I get this ‘reduced options’ version of the screen when I try and change my avatar:

 ![TL0 Change Profile Picture](https://global.discourse-cdn.com/meta/original/3X/e/c/ec822181c7aba1c917c9d4c3e77a9a846694c31a.jpeg)

Do you have any social sign-ups, or SSO on your site? Maybe they could be auto-filling the profile picture on sign-up? (I’m speculating, as I don’t have much experience with those 🙂)

---

<div class="post-metadata">

### Author: ![tmomas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tmomas/32/109144_2.png) [@tmomas](https://meta.discourse.org/u/tmomas)
#### Post date: [18 בינואר,‏ 2022,‏ 10:42pm UTC](https://meta.discourse.org/t/allow-uploaded-avatars-by-trust-level-not-working/215209/3 "2022-01-18T22:42:55Z")

</div>

Just tried myself with a testuser which switched from TL1 → TL0 → TL1: Yes, I observe the same as you, TL0 can not upload own avatar picture, but TL1 can.

> [@JammyDodger](#):
>
> Do you have any social sign-ups, or SSO on your site?

only github, but I see TL0 users with and without github under “Associated accounts” with own avatar pictures, therefore thinking it is not related to the github login.

Additional observation: I even see new users with unverified email (and with no “Associated accounts” entry) having their own avatar pictures.

If a user hasn’t even verified his emailadress, how can he have his own avatar picture?

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [18 בינואר,‏ 2022,‏ 11:18pm UTC](https://meta.discourse.org/t/allow-uploaded-avatars-by-trust-level-not-working/215209/4 "2022-01-18T23:18:17Z")

</div>

Could it be the `automatically download gravatars` setting?

 ![automatically download gravatars](https://global.discourse-cdn.com/meta/original/3X/6/3/63617b656290719160a255a8ac35806618c95f1c.jpeg)

I’ve just tested, and that automatically gives an unactivated TL0 their gravatar image, even with `allow uploaded avatars` set to TL1.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [17 בפברואר,‏ 2022,‏ 11:18pm UTC](https://meta.discourse.org/t/allow-uploaded-avatars-by-trust-level-not-working/215209/5 "2022-02-17T23:18:45Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
