OK. This is a fine solution. Does the system ever expose a user's email address to another user (without them explicitly typing it in)? If so, that would be bad. But otherwise, I think it's fine.
Assuming that, I'm closing this bug.
OK. This is a fine solution. Does the system ever expose a user's email address to another user (without them explicitly typing it in)? If so, that would be bad. But otherwise, I think it's fine.
Assuming that, I'm closing this bug.