From d2fbf646fd0a30f3949aee74747d38e3571f2bf6 Mon Sep 17 00:00:00 2001
From: Marcel Werk <burntime@woltlab.com>
Date: Mon, 7 Oct 2013 13:42:50 +0200
Subject: [PATCH] Added missing check for privacy settings

---
 com.woltlab.wcf/templates/messageSidebar.tpl     |  2 +-
 .../templates/userInformationHeadline.tpl        |  8 +++++---
 com.woltlab.wcf/templates/userProfilePreview.tpl | 16 +++++++++-------
 3 files changed, 15 insertions(+), 11 deletions(-)

diff --git a/com.woltlab.wcf/templates/messageSidebar.tpl b/com.woltlab.wcf/templates/messageSidebar.tpl
index f84a7b6862..da58d5499d 100644
--- a/com.woltlab.wcf/templates/messageSidebar.tpl
+++ b/com.woltlab.wcf/templates/messageSidebar.tpl
@@ -80,7 +80,7 @@
 								<dd>{#$userProfile->activityPoints}</dd>
 							{/if}
 							{event name='userCredits'}
-							{if MESSAGE_SIDEBAR_USER_OPTIONS}
+							{if MESSAGE_SIDEBAR_USER_OPTIONS && $userProfile->isAccessible('canViewProfile')}
 								{assign var='__sidebarUserOptions' value=','|explode:MESSAGE_SIDEBAR_USER_OPTIONS}
 								{foreach from=$__sidebarUserOptions item='__sidebarUserOption'}
 									{if $userProfile->getUserOption($__sidebarUserOption)}
diff --git a/com.woltlab.wcf/templates/userInformationHeadline.tpl b/com.woltlab.wcf/templates/userInformationHeadline.tpl
index 81e6d1c4fd..c18492064b 100644
--- a/com.woltlab.wcf/templates/userInformationHeadline.tpl
+++ b/com.woltlab.wcf/templates/userInformationHeadline.tpl
@@ -2,9 +2,11 @@
 	<h3><a href="{link controller='User' object=$user}{/link}">{$user->username}</a>{if MODULE_USER_RANK && $user->getUserTitle()} <span class="badge userTitleBadge{if $user->getRank() && $user->getRank()->cssClassName} {@$user->getRank()->cssClassName}{/if}">{$user->getUserTitle()}</span>{/if}</h3> 
 </div>
 <ul class="dataList userFacts">
-	{if $user->gender}<li>{lang}wcf.user.gender.{if $user->gender == 1}male{else}female{/if}{/lang}</li>{/if}
-	{if $user->getAge()}<li>{@$user->getAge()}</li>{/if}
-	{if $user->location}<li>{lang}wcf.user.membersList.location{/lang}</li>{/if}
+	{if $user->isAccessible('canViewProfile')}
+		{if $user->gender}<li>{lang}wcf.user.gender.{if $user->gender == 1}male{else}female{/if}{/lang}</li>{/if}
+		{if $user->getAge()}<li>{@$user->getAge()}</li>{/if}
+		{if $user->location}<li>{lang}wcf.user.membersList.location{/lang}</li>{/if}
+	{/if}
 	<li>{lang}wcf.user.membersList.registrationDate{/lang}</li>
 	
 	{event name='userData'}			
diff --git a/com.woltlab.wcf/templates/userProfilePreview.tpl b/com.woltlab.wcf/templates/userProfilePreview.tpl
index eb27f3a7f7..edfc0a2409 100644
--- a/com.woltlab.wcf/templates/userProfilePreview.tpl
+++ b/com.woltlab.wcf/templates/userProfilePreview.tpl
@@ -38,13 +38,15 @@
 			{hascontent}
 				<dl class="plain inlineDataList userFields">
 					{content}
-						{if $user->occupation}
-							<dt>{lang}wcf.user.option.occupation{/lang}</dt>
-							<dd>{$user->occupation}</dd>
-						{/if}
-						{if $user->hobbies}
-							<dt>{lang}wcf.user.option.hobbies{/lang}</dt>
-							<dd>{$user->hobbies}</dd>
+						{if $user->isAccessible('canViewProfile')}
+							{if $user->occupation}
+								<dt>{lang}wcf.user.option.occupation{/lang}</dt>
+								<dd>{$user->occupation}</dd>
+							{/if}
+							{if $user->hobbies}
+								<dt>{lang}wcf.user.option.hobbies{/lang}</dt>
+								<dd>{$user->hobbies}</dd>
+							{/if}
 						{/if}
 						{event name='userFields'}
 					{/content}
-- 
2.20.1