Hello,

I run a forum with Drupal 6, and the users make heavy use of private messages. Most of them prefer to keep their email addresses private, and I would also prefer to protect them from some of the dangers of leaking their email address to strangers. To prevent users from accidentally enabling the "Show my email address" option in the user profile, I would prefer a permission to "Enable users to send PM with their own email address" so I can disable it on a role basis.

I'm tagging this as a "major" "bug report" and not a "feature request" because at least in certain environments it is a very dangerous idea to send a private message with the user's email address in the header, so it's almost a security issue in my mind.

Thanks a lot for this powerful module.

Files: 
CommentFileSizeAuthor
#3 privatemsg-add-permission-for-revealing-email-2038745-3.patch2.84 KBptmkenny
PASSED: [[SimpleTest]]: [MySQL] 4,913 pass(es).
[ View ]
#1 privatemsg-add-permission-for-revealing-email-2038745-1.patch1.78 KBptmkenny
FAILED: [[SimpleTest]]: [MySQL] 4,908 pass(es), 7 fail(s), and 0 exception(s).
[ View ]

Comments

Version:6.x-2.x-dev» 7.x-2.x-dev
Category:bug» feature
Priority:Major» Normal
Status:Active» Needs review
StatusFileSize
new1.78 KB
FAILED: [[SimpleTest]]: [MySQL] 4,908 pass(es), 7 fail(s), and 0 exception(s).
[ View ]

This is not a bug report because the feature does work and even if the situation is dangerous for users they have to opt-in to do so.

That said, I agree this is a good request; I was previously just hacking the module to remove this option but if other people need it too then I think it's worth adding the choice to the module.

I'm attaching a patch for D7, since that's what I'm running on.

Status:Needs review» Needs work

The last submitted patch, privatemsg-add-permission-for-revealing-email-2038745-1.patch, failed testing.

Status:Needs work» Needs review
StatusFileSize
new2.84 KB
PASSED: [[SimpleTest]]: [MySQL] 4,913 pass(es).
[ View ]

Need to add permission so that the tests run...