microsoft / vsts-extension-retrospectives

An Azure DevOps extension for efficient retrospectives
MIT License
180 stars 80 forks source link

Azure devops retrospectives are not completely anonymous #555

Open VictoriaRamirezCharles opened 11 months ago

VictoriaRamirezCharles commented 11 months ago

It is assumed that if the retrospective is configured to be anonymous, the user information should not be seen when the information is loaded when making the request. You can even see which users voted. There is a property called userIdRef which is the user who wrote their opinion. You can take that id and consult to see who it is through this url: https://vssps.dev.azure.com/{org}/_apis/identities ?identityIds=userIdRef, in addition to that after the participants vote you can also see the list of users with the number of votes they have made. If this is going to be anonymous please hide this information, thank you.

image

JStuve commented 11 months ago

Duplicate #524