How can I found out who changed the profile picture?

Question

Hi guys!

Is there a way to find out who changed the profile picture of a co-worker? As far as I know only someone with admin rights is able to do so, but since we got a few of them, and the picture that was changed wasnt into a nice one (slightly mobbing), it would be great to have a log or something where I could look to see who changed the picture, as the profile itself does not tell you much about it...

Thanks for your help!

Kind regards!

Carsten Gellert · Answer

first: thanks for your answers! =)

We are only using Conlfuence and JIRA, no add ons, nothing more. But still somehow someone was able to change the profile pic. Sadly I couldnt find any information about that in the logs. Do you know what logging i need to have enabled to be able to see such changes? so that for the next occurrence we are able to find that out.

Stephen Deutsch · Answer

It's certainly possible, but it takes a bit of work.  For the method I'm describing you will need to have the REST Browser installed and be running Confluence 5.5 or higher.

You first need to find out what the name of the profile picture is (shouldn't be too hard).

Open up the REST browser (/plugins/servlet/restbrowser or in the General Admin Screen towards the bottom)

Unclick the checkbox "Show only public APIs"

Find "/searchv3/1.0/search" on the left side

Type in the field queryString: type:attachment AND <filename>

Click Send

Find the file in the list of results (if it is generic name, you may have to change the startIndex (10, 20, 30, etc.) and search again)

Copy the ID

Then find "api/content/{id}" on the left (it should be at the top)

Paste the ID in the ID box and hit send

Now it should show in the details who uploaded the picture.

Stephen Deutsch · Answer

Remember that the XML-RPC API lets administrators change profile pictures.  Some people use Davin Studer's tool to upload profiles (which uses XML-RPC in the background).