Hide user info (reg. date, bio) if deleted/banned

tildes/tildes/models/user/user.py

@@ -177,6 +177,14 @@ class User(DatabaseModel):
         #  - only allow logged-in users to look through user history
         acl.append((Allow, Authenticated, "view_history"))
 
+        # view_info:
+        #  - can't view info (registration date, bio, etc.) for deleted/banned users
+        #  - otherwise, everyone can view
+        if self.is_banned or self.is_deleted:
+            acl.append((Deny, Everyone, "view_info"))
+
+        acl.append((Allow, Everyone, "view_info"))
+
         # message:
         #  - deleted and banned users can't be messaged
         #  - otherwise, logged-in users can message anyone except themselves

tildes/tildes/templates/user.jinja2

@@ -116,6 +116,7 @@
 <hr>
 {% endif %}
 
+{% if request.has_permission("view_info", user) %}
 <h2>User info</h2>
 <dl>
   <dt>Registered</dt>
@@ -128,6 +129,7 @@
     </div>
   {% endif %}
 </dl>
+{% endif %}
 
 {% if request.has_permission('message', user) %}
   <a href="/user/{{ user.username }}/new_message" class="btn btn-primary">Send a private message</a>