It is suddenly not possible for us to access the profile picture of a User (FullPhotoUrl) without being logged in. Trying to navigate to https://___.file.force.com/profilephoto/[ID]/F redirects me to a login page, instead of showing the image if I am not logged in.
If I am right this should be determined by the checkbox "Show my photo on publicly accessible pages" (field UserPreferencesShowProfilePicToGuestUsers) when editing a profile picture. However this does not change anything.
It seems we can also not make this work on other Orgs.
Are there any other checks that determine the permissions to open the image URL of profile pictures?
This feature seems to not be available anymore for non-community users. We decided to use Documents instead.