Is there a way to find out who changed the profile picture of a co-worker? As far as I know only someone with admin rights is able to do so, but since we got a few of them, and the picture that was changed wasnt into a nice one (slightly mobbing), it would be great to have a log or something where I could look to see who changed the picture, as the profile itself does not tell you much about it...
Thanks for your help!
One idea is for you to change your own profile picture and then check the <Confluence Home>\log\atlassian-confluence.log file.
Once you do that check for the time stamp when you changed the profile pic, if there are any entries logged then you can use that to search trough the log atlassian-confluence.log to validate which user was executing that action.
If you don't see any entries logged then you will not be able to check that without increasing the confluence logging levels .
I also re tagged your question from "confluence-questions" to "confluence-administration" as confluence-questions stands for the plugin "Confluence Questions"
You cannot change user's profile pictures as a Confluence Administrator. Other add-ons can let you do this, for instance if you are using SU for Confluence, the Account-Takeover was logged and you can see who logged in as that user.
How was someone able to change a users profile picture? What customization do you have installed?
It's certainly possible, but it takes a bit of work. For the method I'm describing you will need to have the REST Browser installed and be running Confluence 5.5 or higher.
You first need to find out what the name of the profile picture is (shouldn't be too hard).
Open up the REST browser (/plugins/servlet/restbrowser or in the General Admin Screen towards the bottom)
Unclick the checkbox "Show only public APIs"
Find "/searchv3/1.0/search" on the left side
Type in the field queryString: type:attachment AND <filename>
Find the file in the list of results (if it is generic name, you may have to change the startIndex (10, 20, 30, etc.) and search again)
Copy the ID
Then find "}" on the left (it should be at the top)
Paste the ID in the ID box and hit send
Now it should show in the details who uploaded the picture.
first: thanks for your answers! =)
We are only using Conlfuence and JIRA, no add ons, nothing more. But still somehow someone was able to change the profile pic. Sadly I couldnt find any information about that in the logs. Do you know what logging i need to have enabled to be able to see such changes? so that for the next occurrence we are able to find that out.
Two vulnerabilities have been published for Confluence Server and Data Center recently: March 20, 2019 CVE-2019-3395 / CVE-2019-3396 April 17, 2019 CVE-2019-3398 The goal of this article is...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs