Respect email privacy option in user search via API (#4512)

* respect user's email privacy option * make email visible to admin irrespective of privacy option
go-gitea · Jul 25, 2018 · 4bf0cae · 4bf0cae
1 parent d0fef43
commit 4bf0cae
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/routers/api/v1/user/user.go b/routers/api/v1/user/user.go
@@ -60,7 +60,7 @@ func Search(ctx *context.APIContext) {
 			AvatarURL: users[i].AvatarLink(),
 			FullName:  markup.Sanitize(users[i].FullName),
 		}
-		if ctx.IsSigned {
+		if ctx.IsSigned && (!users[i].KeepEmailPrivate || ctx.User.IsAdmin) {
 			results[i].Email = users[i].Email
 		}
 	}