Hi everyone! First time posting here so apologies if I’m doing something wrong. I’m wondering if there’s any way to allow users to change their profile picture without allowing them to upload images into the forums? For various reasons, the site I work for has had to prevent users from sharing images in the forums, but in doing so, they can no longer change their profile pics. As an admin, I can change the picture – but that isn’t a particularly practical or user friendly solution. I’ve set “Uploaded avatars allowed groups” to “everyone” but I think the real issue is that only staff have “Authorized extensions” to upload images. If I allow users to have them, it means they can upload images into the forums. Is there any workaround to permit uploads only for profile pics/avatars? I’m new to the admin side of discourse so I could be just missing something obvious – or it’s just not possible to do! Thank you for any advice!

Hi @greyblue :wave: welcome to the Meta support forum :slight_smile: perhaps this theme component may help you achieve what you are looking for? [image] Restrict uploads Theme component This is a very small theme component that will remove the upload button from the composer toolbar and disable drag-and-drop uploading for users that are under a specified trust level. Illustration [unrestricted] [restricted] Settings [setting] hammer_and_wrench Repository github.com/tshenry/discourse-restrict-uploads open_book New to Discourse Themes? Beginner’s guide to using Discourse Themes Install this theme component

I wonder what happens if you used the Embedded_media_post_allowed_groups site setting to limit sharing images and allowed users to use that file type. But if it was that simple, there would be no use case for the component @lilly linked above. That setting could also be an option, but you’ll have to carefully observe how it affects things.

this is super helpful! thank you!!

thank you!! I’ll take a look into the site setting too

The extension works to solve this issue – but if you also (like I did) need to stop users from embedding images via URLS, then go to max_oneboxes_per_post and change it to 0 :slight_smile: thanks for the help!!

Have you also tired the embedding setting? I think it blocks oneboxes too

I had that set to staff/admin/mods only but it was still allowing oneboxes for some reason, even when I impersonated a non-mod/staff user? I’m going to try re-setting it though, see if that works now I have the extension! Thanks again!

Thanka for the thoughts! Is there a better way you know of? So far all I’m seeing is that it means links stay as written out in full, but happy to hear other ideas if it could cause other issues?

I suppose if you’re fine with links not having previews that it’s alright. But I think you’re right: there might not be a way of blocking image link oneboxes. I’m digging around to see if there’s a workaround.

Allowing users to change their profile pictures without uploading images to the forum

Product Support

NateDhaliwal (Nate Dhaliwal) July 26, 2026, 12:24am 9

This might not be the best way, since it would block other things like normal link oneboxes.

Topic		Replies	Views
Disable image upload Product Support	2	1537	April 2, 2021
Cannot Upload Profile Picture without adding all groups to uploaded avatars allowed groups Product Support	20	910	June 3, 2024
How to disable file uploads except Avatars Product Support	5	1195	December 28, 2019
Disabling user upload also disables Avatar upload Product Support	1	520	December 14, 2021
More flexible upload options for admin? Feature	6	1299	May 30, 2019

Allowing users to change their profile pictures without uploading images to the forum

Related topics