Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Spoilerize email addresses on individual adminops user profiles #266

Open
dfabulich opened this issue Apr 4, 2021 · 0 comments
Open

Spoilerize email addresses on individual adminops user profiles #266

dfabulich opened this issue Apr 4, 2021 · 0 comments
Labels
moderation tools This affects the way moderators do their work needs discussion It's not clear how to begin/finish this privacy Protect user's private information

Comments

@dfabulich
Copy link
Contributor

dfabulich commented Apr 4, 2021

In the dev environment, login as ifdbadmin@ifdb.org / secret and navigate to the adminops user profile for the admin account. http://localhost:8080/adminops?user=0000000000000000

Actual: You can see the user's email address in the clear.
Expected: Spoilerize it, so you have to click to see the email address, ensuring that it won't be revealed accidentally.

You can also reproduce this by creating a new user account, then logging in as ifdbadmin and going to http://localhost:8080/adminops?users&sortby=new to find the user account.

image

@dfabulich dfabulich added moderation tools This affects the way moderators do their work needs discussion It's not clear how to begin/finish this privacy Protect user's private information labels Apr 4, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
moderation tools This affects the way moderators do their work needs discussion It's not clear how to begin/finish this privacy Protect user's private information
Projects
None yet
Development

No branches or pull requests

1 participant