was Moderators should not see emails in SSO section - #13 by techAPJ reverted? It seems moderators are able to see the payload (which contains the email) again.

Not sure, @techAPJ can you have a peek when you are back?

I am not able to repro this on latest Discourse version. [画像] anon60302432: It seems moderators are able to see the payload (which contains the email) again. Note that moderators will see the SSO payload but that payload will not contain external_email.

Is it possible to restrict visibility of the entire SSO section for mods?

Just updated to beta 3 and ran a test. Account only had moderator, last payload included the email even with the “moderators can see emails” option disabled. email= external_id= name= nonce= username= I noticed you mentioned external_email but on our payload its “email”, not “external_email”, m…

To add on, I believe I used this post when creating our SSO process: Discourse SSO and API Helper for PHP . Uses “email” as one of the parameters, not “external_email” @techAPJ

[画像] anon60302432: last payload included the email even with the “moderators can see emails” option disabled. Are you talking about the /admin/users/{id}/{username} page or somewhere else?

[画像] anon60302432: I noticed you mentioned external_email but on our payload its “email”, not “external_email”, maybe that’s why? Is that something we need to fix on our end? No, when the SSO record is created the external_email is saved as per: app/models/discourse_single_sign_on.rb …

Aha, I see that the payload is visible to moderators. I’ve hidden the SSO payload for moderators via: FIX: do not show SSO last payload to moderators (#12084) committed 10:42AM - 15 Feb 21 UTC (UTC) [画像] …

SSOペイロードは再びモデレーターが見ることができるようになりますか？

サポート

anon60302432 2021 年 2 月 8 日午後 8:03 6

補足ですが、SSO プロセスの作成時にこの投稿を参照したと思います：Discourse SSO and API Helper for PHP

@techAPJ

トピック		返信	表示
User email is not hidden under Single Sign On area of admin page Bug	4	639	2021 年 2 月 17 日
Moderators should not see emails in SSO section UX	12	1705	2020 年 11 月 12 日
Can no longer view users emails as a moderator Support	6	1192	2018 年 7 月 28 日
DiscourseConnect Single Sign On email & last payload cached across users Bug	2	762	2021 年 10 月 20 日
SSO is forcibly creating the user as an admin Bug	13	1180	2021 年 9 月 17 日

SSOペイロードは再びモデレーターが見ることができるようになりますか？

関連トピック