When sending to "Authenticated Users" or any other role - emails are received not just by the current enabled users in that role, but also by disabled users - including those disabled as being possible spammers or hackers.

Unfortunately, in conjunction with the current "BCC" content in the "To" field issue, a disabled account could receive the email addresses for your whole site membership 8¬(

Comments

oadaeh’s picture

oadaeh commented
Version: 5.x-2.2 » 5.x-2.3
Status: Active » Fixed

Sorry, I had fixed this back on the 16th in the 5.x-2.x branch but hadn't cut a release because I was expecting to get a couple of other bugs in there before now. I've gone ahead and created release 5.x-2.3, which contains the fix for this.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)