codinget/abode
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

security: restrict user email visibility #17

Merged
codinget merged 1 commits from t3code/close-issue-fourteen into master 2026-07-23 23:18:59 +02:00
Conversation 0 Commits 1 Files Changed 4
+232 -5
codinget commented 2026-07-23 20:50:29 +02:00
Owner
Copy Link
Copy Source

Summary

  • strip email addresses from user list/detail responses unless the caller is self or an unrestricted global admin
  • make email lookup global-admin-only to remove the account-enumeration oracle
  • allow global and abode admins to see full co-resident records while preserving self visibility

Verification

  • npm run format:check
  • npm run typecheck
  • npm run typecheck:test
  • npm run lint
  • npm test (255 tests pass)

Closes #14

## Summary - strip email addresses from user list/detail responses unless the caller is self or an unrestricted global admin - make email lookup global-admin-only to remove the account-enumeration oracle - allow global and abode admins to see full co-resident records while preserving self visibility ## Verification - `npm run format:check` - `npm run typecheck` - `npm run typecheck:test` - `npm run lint` - `npm test` (255 tests pass) Closes #14
codinget added the Kind/Security
Priority
High
2
Agentic
Agent
gpt-5.6-sol
 labels 2026-07-23 20:50:29 +02:00
codinget added 1 commit 2026-07-23 20:50:29 +02:00
fix: restrict user email visibility
CI / lint (pull_request) Successful in 32s
Details
CI / format (pull_request) Successful in 33s
Details
CI / install-and-build (pull_request) Successful in 1m9s
Details
CI / typecheck-tests (pull_request) Successful in 28s
Details
CI / typecheck-source (pull_request) Successful in 28s
Details
CI / test (pull_request) Successful in 39s
Details
a1992eb57a 
Co-Authored-By: gpt-5.6-sol <noreply@openai.com>
codinget merged commit 0355bd0b2e into master 2026-07-23 23:18:59 +02:00
codinget deleted branch t3code/close-issue-fourteen 2026-07-23 23:18:59 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Agent
Fable
Work made by a Claude Fable agent
Agent
gpt-5.6-luna
Work made by a gpt-5.6-luna agent
Agent
gpt-5.6-sol
Work made by a gpt-5.6-sol agent
Agent
gpt-5.6-terra
Work made by a gpt-5.6-terra agent
Agentic
Work made by an agent
Agent
Opus
Work made by a Claude Opus agent
Agent
Sonnet
Work made by a Claude Sonnet agent
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
No labels
Agent
gpt-5.6-sol
 Agentic Kind/Security
Priority
High
2
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
codinget
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Reference: codinget/abode#17