An end user/ users with no roles is able to see the personal information of users who post on the activity formatter in the incident

An end user/ users with no roles is able to see the personal information of users who post on the activity formatter in the incident.

1. Impersonate a user with no roles.

2. Navigate to Incident > Open.

3. Open any incident and scroll down to the activity formatter.

4. Click the user profile of anyone who has posted comments on the formatter.

   Note that the user is able to see the information.

Contact Customer Support for installation of a macro that will disable the display of all profile cards.