Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-24692

Names of hidden students visible in forwarded email messages

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: CLOSED
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.9.0
    • Fix Version/s: 2.8.2, 2.9.0
    • Component/s: Messages Tool
    • Labels:
      None
    • 2.9 Status:
      Resolved
    • Previous Issue Keys:
      MSGCNTR-641

      Description

      This issue was revealed after MSGCNTR-585 was fixed. The names of hidden students (via the privacy tool) are now visible in the body of messages that are forwarded to email accounts (in the "To" information). Looking through some history, I suspect this "hidden" logic was inadvertently changed via SAK-14392. Previously, I think the logic created the message body for each individual recipient and then sent the email individually. This was grossly inefficient, so the code now creates the message body once and sends that to all of the recipients. Thus, if someone with privileges to view the hidden students sends the message, it is using that user's privileges to put together the body of the message.

      As a solution, we will no longer display the hidden users in the "To" information. If there are "hidden" recipients of this message, we will append "and undisclosed recipients" to the end of the recipient information.

        Gliffy Diagrams

          Zeplin

            Attachments

              Issue Links

                Activity

                  People

                  Assignee:
                  maintenanceteam Core Team
                  Reporter:
                  arwhyte Anthony Whyte
                  Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                    Dates

                    Created:
                    Updated:
                    Resolved:

                      Git Integration