# Cannot Upload Profile Picture without adding all groups to uploaded avatars allowed groups

**URL:** https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991
**Category:** Support
**Created:** [May 30, 2024, 3:56pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991 "2024-05-30T15:56:51Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 3:56pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/1 "2024-05-30T15:56:51Z")

</div>

I have a user who would like to upload a custom profile picture, but it won’t let him. I’ve never seen this issue with any of our other users. He’s in trust level 2, but even trust level 0 is set to allow uploaded profile pictures.

Does anybody know of some other setting I may be overlooking or unaware of? Thanks for any help. Screenshots below.

Screenshot while logged in as user:

 ![image](https://global.discourse-cdn.com/meta/original/4X/1/b/1/1b1e9a1928e4abdcd3091026c6f26cf4f769e7b5.png)

Screenshot of admin setting:

![image](https://global.discourse-cdn.com/meta/original/4X/0/d/8/0d8067ea97c07b0e4ea0c6653e5783bc659c56f3.png)

Screenshot from user details:

 ![image](https://global.discourse-cdn.com/meta/original/4X/2/a/b/2ab58fa78f06b718239a11dfe4117d4626ada8f1.png)

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [May 30, 2024, 4:15pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/2 "2024-05-30T16:15:28Z")

</div>

> [@PeakProsperity](#):
>
> Does anybody know of some other setting I may be overlooking or unaware of?

`authorized extensions`? Are they allowed to upload images?

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 6:00pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/3 "2024-05-30T18:00:58Z")

</div>

We have thousands of users and other people are able to upload images no problem, so I don’t think it has to do with authorized extensions. This user just doesn’t even see an upload option at all.

---

<div class="post-metadata">

### Author: ![putty](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/putty/32/370902_2.png) [@putty](https://meta.discourse.org/u/putty)
#### Post date: [May 30, 2024, 6:26pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/4 "2024-05-30T18:26:25Z")

</div>

Have they tried multiple files? My first hunch is file size, either dimensionally or filesize itself.

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [May 30, 2024, 6:33pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/5 "2024-05-30T18:33:51Z")

</div>

Is there anything special on how that user was created? Do you use [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true)? `discourse connect overrides avatar` also prevents users from uploading an avatar.

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 6:37pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/6 "2024-05-30T18:37:19Z")

</div>

> [@putty](#):
>
> Have they tried multiple files?

No - They literally have no upload option whatsoever.

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 6:37pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/7 "2024-05-30T18:37:40Z")

</div>

> [@Moin](#):
>
> o you use [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true)?

We do use [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true), but no other user ever has any issues.

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [May 30, 2024, 6:39pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/8 "2024-05-30T18:39:53Z")

</div>

Does [safe mode](https://meta.discourse.org/t/53504?silent=true) change anything?

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 6:40pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/9 "2024-05-30T18:40:43Z")

</div>

I’m not seeing any unusual log activity for this user in [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true):

`[2024-05-30 01:59:26] sso_provider.INFO: parse_request.success {"user_id":169965}`

We don’t use WordPress avatars. That is supposed to be controlled entirely within Discourse:

![image](https://global.discourse-cdn.com/meta/original/4X/4/4/2/442192dbf5f7f6269a5322e01f30680828ee663f.png)

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 6:42pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/10 "2024-05-30T18:42:35Z")

</div>

[Safe mode](https://meta.discourse.org/t/53504?silent=true) has no effect.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [May 30, 2024, 7:09pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/11 "2024-05-30T19:09:26Z")

</div>

Try another browser and/or incognito window.

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 7:27pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/12 "2024-05-30T19:27:10Z")

</div>

Other browsers do not work. This is definitely a permissions issue. And, the plot thickens because I just tested few other users and it seems to be happening for everybody (except admins from what I can tell).

It only gives the system assigned option.

 ![image](https://global.discourse-cdn.com/meta/original/4X/6/2/c/62cafe9e38da791dd145eaf744b374d3f04dc677.png)

As an admin, I see the other options:

 ![image](https://global.discourse-cdn.com/meta/original/4X/9/d/a/9daa72a068b87a9f18fde42ab386f388dfa1f836.png)

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 7:34pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/13 "2024-05-30T19:34:39Z")

</div>

Okay, I figured it out. I added every trust level and every possible group a user might be in to the list of allowed groups for uploading profile pictures:

 ![image](https://global.discourse-cdn.com/meta/original/4X/0/e/6/0e6e8d604b0172f6c889e34b64370fcec73a2a71.png)

However, previously it was only set to `trust_level_0`, so anybody with a trust level _higher_ than TL0 was not able to upload profile pictures. The strange thing though is when I look at user profiles, everybody is in this group even if they’ve since been promoted to a higher trust level. Did something change in a recent release? It seems like if you specified TL0 as the required level for uploads that it would automatically grant that same permission to higher trust levels.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [May 30, 2024, 7:39pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/14 "2024-05-30T19:39:04Z")

</div>

`trust_level_0` is the default value for `uploaded_avatars_allowed_groups`.

> [@PeakProsperity](#):
>
> However, previously it was only set to `trust_level_0`, so anybody with a trust level _higher_ than TL0 was not able to upload profile pictures.

Everyone is in tl0, as you expected.

WIthout looking at commits, my guess is that there is or, more likely, was, a bug and that an upgrade will fix it.

> [@PeakProsperity](#):
>
> It seems like if you specified TL0 as the required level for uploads that it would automatically grant that same permission to higher trust levels.

That is how it’s supposed to work.

You might share your exact commit and maybe look at titles of commits just before ((and maybe after) that.

I edited the subject to maybe get more attention if this is a bug.

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [May 30, 2024, 7:47pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/15 "2024-05-30T19:47:51Z")

</div>

Awesome. We’re on version 3.2.1, exact commit here: [Commits · discourse/discourse · GitHub](https://github.com/discourse/discourse/commits/662e1cdfe1f4575c5e0578a5e4d1bfbc3c4d5747)

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [May 30, 2024, 7:54pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/16 "2024-05-30T19:54:40Z")

</div>

Well, I don’t know. You might try upgrading to latest to see if that fixes it.

I don’t see any commits that seem like obvious candidates.

I can’t replicate the problem on one of my sites.

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [May 31, 2024, 12:00am UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/17 "2024-05-31T00:00:56Z")

</div>

I think this may be a group visibility thing perhaps, if it’s `stable`.

Could you try changing the visibility of your TL0 group to ‘everyone’ in the group settings and see if that has the desired effect? (And reset `uploaded_avatars_allowed_groups` to just TL0)

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [May 31, 2024, 2:26am UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/18 "2024-05-31T02:26:59Z")

</div>

I tested on my Stable instance with test user that has TL2. Could not reproduce. My test user has no issues with uploading an Avatar

Discourse Stable 3.2.2

Group settings default I believe

 ![Screenshot_20240530-232441](https://global.discourse-cdn.com/meta/original/4X/8/4/9/8498ac8f23d970ac635473e1e10d6a468735346c.jpeg)

---

<div class="post-metadata">

### Author: ![Firepup650](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/firepup650/32/465200_2.png) [@Firepup650](https://meta.discourse.org/u/Firepup650)
#### Post date: [May 31, 2024, 4:30am UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/19 "2024-05-31T04:30:17Z")

</div>

If you set the visibility of the TL0 group to either staff or no one, does the bug occur then?

---

<div class="post-metadata">

### Author: ![PeakProsperity](https://avatars.discourse-cdn.com/v4/letter/p/c57346/32.png) [@PeakProsperity](https://meta.discourse.org/u/PeakProsperity)
#### Post date: [June 3, 2024, 5:24pm UTC](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991/20 "2024-06-03T17:24:57Z")

</div>

Thanks, @Firepup650

TL0 group visibility was set to `Group owners and moderators`. Changing it to `Everyone` fixes the issue. So, unfortunately we cannot hide the members of trust level and still let people pick their own avatar. That seems strange, since why should one affect the other. Either they’re in the group or not.

Anyways, I’m okay to live with this if need be. At least I know. I’m going to leave the trust level groups hidden since that will open up cans of worms in my community, and just add the other groups so they can still edit their avatar.

[Next page](https://meta.discourse.org/t/cannot-upload-profile-picture-without-adding-all-groups-to-uploaded-avatars-allowed-groups/309991.md?page=2)
