[v.4] How to allow user to uplod avatar, cover and update his profile?

I agree with you. You should use a policy (is-owner) which checks if you are the owner of the record before you are allowed to make changes.

1 Like