SecurityConcerns

Profile API

Profile Member Activity (/profile/{profileID}/members/{personID}/activity/list)

When returning results should profile security be taken into account on individual activity results? Security is checked against the requesting profile, but the results normally will return all activity for that person. Should this be correct or should it filter out activity on profiles that the person does not have security to view? I'm currently going to error on the side of caution and filter based upon profile security.