zulip/zerver
Mateusz Mandera 479b1dea84 export: Don't export real email of users unless accessible to admins.
An administrator shouldn't be able to bypass a user's setting to hide
their email address from everyone, including admins.
Therefore, we should overwrite the delivery_email for such users during
export - unless the user consented to have their private data exported.

The notable consequence of this is that such user accounts will become
completely inaccessible after importing this data to a new server, due
to not having a functional email address on record.

These accounts will only be possible to reclaim via a manual
intervention to change the email address on the `UserProfile` by server
administrators.
2025-03-28 17:44:28 -07:00
..
actions user_groups: Send metadata access related events on remove subgroups. 2025-03-25 13:20:06 -07:00
data_import slack_import: Fix thread conversion condition. 2025-03-25 16:38:21 -07:00
integration_fixtures/nagios
lib export: Don't export real email of users unless accessible to admins. 2025-03-28 17:44:28 -07:00
management export: Plumb consented_user_ids to export_usermessage_batch in a file. 2025-03-28 17:44:28 -07:00
migrations migration: Fix topic name for imported DMs from third-party exports. 2025-03-25 16:38:21 -07:00
models support: Show current billing admins on cloud support page. 2025-03-24 16:00:48 -07:00
openapi typing: Rename "(no topic)" to empty string topic. 2025-03-27 09:29:49 -07:00
tests apps: Provide arm64 app build by default for macOS. 2025-03-28 16:45:07 -07:00
tornado event_queue: Remove pre-5.0 compatibility code. 2025-03-26 10:54:38 -07:00
transaction_tests test_user_groups: Add durable=True to the independent transaction. 2024-11-21 14:55:15 -08:00
views custom_profile_fields: Restrict access to users in the same realm. 2025-03-28 17:41:32 -07:00
webhooks integration-docs: Rename Jira doc to avoid collision with Jira plugin. 2025-03-26 11:19:31 -07:00
worker deliver_scheduled_emails: Use a queue, instead of infinite retries. 2025-03-04 16:09:25 -08:00
__init__.py
apps.py ruff: Fix UP007 Use X | Y for type annotations. 2024-07-13 22:28:22 -07:00
context_processors.py portico: Replace "Find accounts" link with "Log in". 2025-01-24 14:55:47 -08:00
decorator.py settings: Add "can_manage_billing_group" realm setting. 2025-03-10 09:36:30 -07:00
filters.py filters: Do not report AVATAR_SALT, or other salts. 2025-03-13 09:36:07 -07:00
forms.py errors: Standardize "already in use" error messages. 2025-03-04 16:10:25 -08:00
logging_handlers.py ruff: Fix UP007 Use X | Y for type annotations. 2024-07-13 22:28:22 -07:00
middleware.py middleware: Parse Accept header properly. 2025-03-26 22:29:09 -07:00
signals.py send_email: Set the Date header according to local enqueue time. 2025-03-10 16:48:08 -07:00