This is the facebook clone very dire user policy's fault.

Unless you had requested friendship for the other user and he has accepted 
you, you cannot see his profile.

You could hack this security check:

(default.py line 102)
if not user or not (user.id==me or \
    myfriends(Link.target==user.id).count()):
    redirect(URL('home'))


And change it by this more permissive statement:
if not user or not (user.id==me or \
    myfriends(Link.target==user.id).count() or \
    db(db.link.target==me).count()):
    redirect(URL('home'))

Issue
>
> *Attempts to view profile+wall of people offering friendship redirects 
> you to your wall.*
>

Reply via email to