MuckRock / muckrock

MuckRock's source code - Please report bugs, issues and feature requests to info@muckrock.com
https://www.muckrock.com
GNU Affero General Public License v3.0
114 stars 22 forks source link

Give users with View and Edit permissions ability to view Raw Emails on MuckRock Requests #1876

Closed mitchelljkotler closed 2 months ago

mitchelljkotler commented 2 months ago

Users that have been explicitly given permissions (such as view or edit permissions) should have the ability to see the "Raw" emails. We originally severely limited this for concerns around confusing users that haven't generally borne out.

As long as we're making this change, would grant these view permissions for both view and editor permissions, but fine if we limit this to just users with edit permissions. Would also be covered (ideally) in circumstances where people inherit view permissions from their org membership.

(Filed by @morisy )

mitchelljkotler commented 2 months ago

I will limit this to those with Edit access. Otherwise anybody could view the raw emails for public requests.