First time posting here so apologies if I’m doing something wrong.
I’m wondering if there’s any way to allow users to change their profile picture without allowing them to upload images into the forums?
For various reasons, the site I work for has had to prevent users from sharing images in the forums, but in doing so, they can no longer change their profile pics. As an admin, I can change the picture – but that isn’t a particularly practical or user friendly solution.
I’ve set “Uploaded avatars allowed groups” to “everyone” but I think the real issue is that only staff have “Authorized extensions” to upload images. If I allow users to have them, it means they can upload images into the forums.
Is there any workaround to permit uploads only for profile pics/avatars? I’m new to the admin side of discourse so I could be just missing something obvious – or it’s just not possible to do!
I wonder what happens if you used the Embedded_media_post_allowed_groups site setting to limit sharing images and allowed users to use that file type.
But if it was that simple, there would be no use case for the component @lilly linked above. That setting could also be an option, but you’ll have to carefully observe how it affects things.
The extension works to solve this issue – but if you also (like I did) need to stop users from embedding images via URLS, then go to max_oneboxes_per_post and change it to 0
I had that set to staff/admin/mods only but it was still allowing oneboxes for some reason, even when I impersonated a non-mod/staff user? I’m going to try re-setting it though, see if that works now I have the extension!
welcome to the Meta support forum 