How can I found out who changed the profile picture?

[Carsten Gellert]

Hi guys!

Is there a way to find out who changed the profile picture of a co-worker? As far as I know only someone with admin rights is able to do so, but since we got a few of them, and the picture that was changed wasnt into a nice one (slightly mobbing), it would be great to have a log or something where I could look to see who changed the picture, as the profile itself does not tell you much about it...

Thanks for your help!

Kind regards!

[Stephen Deutsch]

It's certainly possible, but it takes a bit of work.  For the method I'm describing you will need to have the REST Browser installed and be running Confluence 5.5 or higher.

You first need to find out what the name of the profile picture is (shouldn't be too hard).

Open up the REST browser (/plugins/servlet/restbrowser or in the General Admin Screen towards the bottom)

Unclick the checkbox "Show only public APIs"

Find "/searchv3/1.0/search" on the left side

Type in the field queryString: type:attachment AND <filename>

Click Send

Find the file in the list of results (if it is generic name, you may have to change the startIndex (10, 20, 30, etc.) and search again)

Copy the ID

Then find "api/content/{id}" on the left (it should be at the top)

Paste the ID in the ID box and hit send

Now it should show in the details who uploaded the picture.

[Steve Behnke [DiscoverEquip.com]]

You cannot change user's profile pictures as a Confluence Administrator. Other add-ons can let you do this, for instance if you are using SU for Confluence, the Account-Takeover was logged and you can see who logged in as that user.

How was someone able to change a users profile picture? What customization do you have installed? 

[Stephen Deutsch]

Remember that the XML-RPC API lets administrators change profile pictures. Some people use Davin Studer's tool to upload profiles (which uses XML-RPC in the background).

[lavitz slambert]

Hey Carsten,

One idea is for you to change your own profile picture and then check the <Confluence Home>\log\atlassian-confluence.log file.

Once you do that check for the time stamp when you changed the profile pic, if there are any entries logged then you can use that to search trough the log atlassian-confluence.log to validate which user was executing that action.

If you don't see any entries logged then you will not be able to check that without increasing the confluence logging levels .

I also re tagged your question from "confluence-questions" to "confluence-administration" as confluence-questions stands for the plugin "Confluence Questions"

Thanks and Regards,

Lavitz - the guy that uses Confluence on Windows as a Hobby!

[Carsten Gellert]

first: thanks for your answers! =)

We are only using Conlfuence and JIRA, no add ons, nothing more. But still somehow someone was able to change the profile pic. Sadly I couldnt find any information about that in the logs. Do you know what logging i need to have enabled to be able to see such changes? so that for the next occurrence we are able to find that out.