Open micbar opened 5 months ago
searching users for shares and listing them in the admin ui is the same /users endpoint. Admins can always see the email in the user management. We could in theory distinguish the two types of requests because searching for recipientso uses the $search query parameter, but this is would not make sense IMO.
If you are an admin you can see the email. The current implementation just properly reflects the permissions of the user.
The user story is already implemented:
As an admin, i want to hide personal information like e-mail address from my users
It is not
As an admin, i want to hide personal information like e-mail address from other admins
or is it?
Description
User Stories
Value
Acceptance Criteria
Definition of ready
Definition of done