MUGLE

Publicly viewing a user's email by admins

Bug #783984 reported by Prageeth Silva
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MUGLE
Fix Released
Low
Prageeth Silva
MUGLE 0.1

Bug Description

At the moment, even admins are not allowed to view another user's email address. Should this be the case? Or should we allow only the admin or the owner can view it?

Prageeth Silva (prageethsilva)
Changed in mugle:
importance: Undecided → Low
Revision history for this message
Matt Giuca (mgiuca) wrote :

Admins should be able to do everything. There is no reason not to let them do everything, since they will be able to do everything on the Google panel anyway.

Having said that, this raises a concern since we are using Google logins to identify users, we may need to expose users emails to other users. We shouldn't do that.

Revision history for this message
Prageeth Silva (prageethsilva) wrote :

I think that's the reason Scott set it to be NONE (no one has read access).
So I'll change it to ADMINS for now.

Revision history for this message
Matt Giuca (mgiuca) wrote :

OK. This is a fine solution. Does the system ever expose a user's email address to another user (without them explicitly typing it in)? If so, that would be bad. But otherwise, I think it's fine.

Assuming that, I'm closing this bug.

Changed in mugle:
assignee: nobody → Prageeth Silva (prageethsilva)
milestone: none → 0.1
status: New → Fix Committed
Matt Giuca (mgiuca)
Changed in mugle:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.