dualfroz/kanboard-kanboard
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(api): remove author email addresses from comments and activity

Browse Source 
getComment, getAllComments, getProjectActivity, getProjectActivities and
getMyActivityStream returned the email address of the comment or event
author to any project member. Comment events also carry it in their
stored comment data.

The models keep the column since the web UI needs it for avatars, the
procedures drop it before answering.

Fixes #5876
This commit is contained in:
dualfroz committed 2026-10-03 17:19:19 +02:00
1 parent 94a9f89416
commit 43d1e8b58c
6 files changed
+122 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

app/Api/Procedure/ProjectProcedure.php
+2 -2
View File
@@ -97,13 +97,13 @@ class ProjectProcedure extends BaseProcedure
->check($this->getClassName(), 'getProjectActivities', $project_id);
}
return $this->helper->projectActivity->getProjectsEvents($project_ids);
return $this->filterEvents($this->helper->projectActivity->getProjectsEvents($project_ids));
}
public function getProjectActivity($project_id)
{
ProjectAuthorization::getInstance($this->container)->check($this->getClassName(), 'getProjectActivity', $project_id);
return $this->helper->projectActivity->getProjectEvents($project_id);
return $this->filterEvents($this->helper->projectActivity->getProjectEvents($project_id));
}
public function createProject($name, $description = null, $owner_id = 0, $identifier = null, $start_date = null, $end_date = null, $priority_default = null, $priority_start = null, $priority_end = null, $email = null)