Since Profile2 doesn't allow 2 pictures like the Profile(1) (official + user specified) we don't know how to handle this use case anymore:
- internal users: have official photo (always visible in Roster) and can have user specified one
- guest users: don't have official photo but can have user specified one
One possible fix is to allow to enable/disable the profile picture change per user type. Example:
profile2.picture.change.enabled = false
profile2.picture.change.maintain.enabled = true
This (example) would to deny (all) users to change their pic, unless they are of "maintain" user type.
I'm working on a very simple patch for this - will attach here soon.