Blog Post
Glad i'm not alone here... I have to say i think it's great that more stuff is getting added into LSI especially as ADMIN METRICS was due to be killed many many moons ago. I'm also the first one to beg for more investment in the community product, this is otherwise a great release but access to User metrics and personal info is tightly controlled. Access to LSI is a very benign permission to give someone as we do and it appears everyone else does, it helps me that others can see this so i'm not making reports every five mins....
This seems like a bit of a backdoor and doesn't make sense.
Im sure, in fact i know you guys will have some logic for this but in practice this seems to be an ill thought out enhancement which will expose PII data to the very basic of platform users "i mean staff not customers" who would normally just pull some high level numbers etc.
I have custom profile fields that contain members phone numbers, address etc etc
LSI as of 19.8 will become a pretty redundant tool for my business and what on the face of it is an enhancement in the product is actually a step back.
Also given GDPR etc , i'd suggest it may be wise to alert all customers in a more proactive way of this change, if they don't read the release notes every month and know about this there is a very real risk that they get upgraded to 19.8, a bunch of people in their business who have LSI now have access to PII data. In the EU that would warrant being reported to the ICO as a data breach and under GDPR = big fines
I don't want anyone to find themselves in that situation when it could have been avoided.