I was renewing some memberships through the website this evening. When I put in an ID, it populated the player’s name, DOB, and gender. DOB and gender should not be displayed. I’ve reported it through the website, but though others might want to encourage them to fix that. More people complaining might bump it up in priority.
There’s another issue where the name can be changed. That’s not a privacy issue but can cause problems. Last week, I had a parent who thought it would be a good idea to change Tommy’s name to his little brother Johny rather than getting Johny his own id. The system let her. We only caught it because the tournament failed validation because Johny was playing in a JTP section and Tommy was too old.
That definitely should not happen in general, though I think it can happen if you’re logged in and renewing your own membership. I wonder if some recent changes altered the default behavior.
Name changes get tricky, having staff get involved just to alter a typo in a name field might seem excessively cautious. Birthdate changes create similar issues.
I’ve passed this on to the staff who oversee development, most of whom are at the K-12 this weekend.
Then there was a person who was trying to do a family membership, added a child, and then discovered that actually no member was added and the adult member’s name was changed. That person then simply created a new membership for the child and contacted the office the following week to get things fixed.