Respect email privacy option in user search via API (#4512)

* respect user's email privacy option * make email visible to admin irrespective of privacy option
2018-07-25 13:11:22 +01:00 · 2018-07-25 13:11:22 +01:00 · 4bf0cae1f5
parent d0fef4395f
commit 4bf0cae1f5
1 changed files with 1 additions and 1 deletions
--- a/routers/api/v1/user/user.go
+++ b/routers/api/v1/user/user.go
@ -60,7 +60,7 @@ func Search(ctx *context.APIContext) {
 			AvatarURL: users[i].AvatarLink(),
 			FullName:  markup.Sanitize(users[i].FullName),
 		}
-		if ctx.IsSigned {
+		if ctx.IsSigned && (!users[i].KeepEmailPrivate || ctx.User.IsAdmin) {
 			results[i].Email = users[i].Email
 		}
 	}