Restrict Viewing of User Profiles

I have tried searching for this but not been able to find the answer I want. Apologies if this has been dealt with before.

I have CB1.8 with CBSubs1.3 on Joomla 2.5.4

I wish to use CB and CBSubs to manage memberships NOT to create a social networking site. I want users to be able to view and edit their own profiles but under no circumstances must they be able to view anyone else's profile. However I want the usergroup 'Senior Staff' to be able to view any user profiles from the front end.

I have done the following and want to know if this is sufficient or if there is anything else I need to do


* Lists are set 'View Access Level' as STAFF
* Under user profile 'Allow Access To' is set to 'Senior Staff'
* The CB Profile menu item is set to Registered Users
* Under Connections 'Enable Connections' is set to NO
* CB Connections plugin is unpublished

Is this 100% water-tight or could a registered user view someone else's profile by some means?

Is there anything else I can do to make sure the site works as I want it to?

Thanks

Damian

With those settings I don't think a user could even access their own profile. Ensure you've tested it thoroughly. You may want to use CB Auto Actions to force a redirect to prevent someone from viewing a profile other then their own (check [get_user] to see if user is present in the URL then redirect away).

Thank you for your reply

Users can view and edit their own profile but don't appear to be able to view other people's profile (though staff can see any profile).

I like belt and braces so will have a look at the CB Auto Actions option for extra security.