Open CodeNamedRobin opened 7 months ago
Depends on full implementation of https://github.com/GEWIS/sudosos-backend/issues/62, because of https://github.com/GEWIS/sudosos-backend/issues/23. Because every SudoSOS user is allowed to fetch all users within SudoSOS, they can then also find out all email addresses, which leaks a lot of personal information.
For management reasons it would be nice if all user emails are returned. From revision-to-response.ts:149 :
email: user.type === UserType.LOCAL_USER ? user.email : undefined,