All user email addresses exposed in NC20+

Yes.

You can still find them in the global search, share files with them or write them in Talk. But obviously you can’t send them emails anymore, if you can’t see their email address. However, they will continue to receive notification emails from your Nextcloud if they provided an email address.

Why? You don’t have to tune it induvidually as an admin, but you can. If you don’t tune it users can still decide by them self what information they want to provide and who they want to be able to see it. Or you can just turn off profiles globally.

Maybe you have a contact entry of the respective user in the contacts app that has the email address in it? Or the email address of this user is also the display name…?

you are completely wrong. Chances to have duplicate displayName for people with common names e.g. Müller and Meier are very high. email is always unique and is very useful to exactly identify the person.

as you said the point is “collaboration” and not segregation. User with account on the system and collaborating with others are expected to share some contact details. One can discuss every single piece of information from very restrictive point of view or one can set useful defaults which is the case here. If you don’t want to expose private email information - just provide every user an email address from your organization - then it’s not “personal” anymore.

Okay. So you have different options: Anybody can see anything, Anybody can see nothing and Nobody has a profile at all.
Everyone of those options is unsatisfying and not useful in a normal context. As an administrator of a collaboration tool I want to set the details for all users at the same time, what can be see and what not.

Because sharing with or writing to other people is the key functionality of a collaboration plattform.

The problem is: I can’t tune it individually. Where do I set that the email address can’t be seen in standard and reset the option for all users?

Only the contacts that are synced because they are users of nextcloud. The second user to test is new.

It makes no sense that I might be wrong.

Irrelevant for the DSGVO perspective.

Irrelevant for the DSGVO perspective.

as you said collaboration not information. It’s not needed to collaborate.

Irrelevant for the DSGVO perspective.

Yes. Or I could create a central email-account everybody sends his work to and then distribute it to everybody again. 1990 both solutions were okay, mayby but today both solutions are worthless to mention.

No, users can always decide what other users can see.

Why do you care? Just turn profiles off globally. After that only the displayname will be shown. Anything else (probably not even that) is not feasible to bypass any DSVGO bureaucracy anyways.

And try to inform your self how other public organizations handle it that are using Nextcloud.

1 Like

If they should be able to send emails to each other, they obviously have to see the email adresses they need to send emails to. But luckily you are using Nextcloud which is a modern solution where users can share files and send messages to each other without having to use a 1990s technology aka email. So what’s it gonna be? I’d say turn that profiles off, and you’ll be fine. :wink:

Whether you’ll also be fine regarding the DSVGO, by just doing that, is a question that is beyond the scope of this forum.

That’s okay, but it doesn’t work. I turned of profiles in two different nextcloud instances that are installed individually.
All settings don’t seem to change anything.

The second install is a fresh install, yet only with test-users except for the admin.
I set email to private in config.php.
Still every user (old and new) can see all others email-addresses.
I turned off profile and created a new user.
He still sees the old users mail addresses and his mail-address is shown, too, although he got no profile.

If it only would work :slight_smile:

1 Like

Did you also add the following line to the config.php to turn it off globally?

'profile.enabled' => false,

I configured it like that on my instance, and I can only see the display name when searching for other users…

Maybe you can also run the occ command first, just to be sure:

occ config:app:set settings profile_enabled_by_default --value="0"

I changed config.php. No profile anymore, but the mail-address is still shown in contacts and the user search.

I need to figure out how to open the console for the new instance. It’s a new provider and I didn’t tried it by now, but I will.

Thanks

I hate to admit it, but it’s possible that I was wrong. :wink:

Honestly, I could have sworn that this is how it works, and that only the display name is shown on my productive cloud. Turns out that’s not the case. While that’s not an issue for me, it kind of botherd me, and I started playing around a bit on my test instance (NC 27.1.0 RC4), and I can’t get the email addresses to stop showing up, no matter if profiles are globally on or off, and no matter if the email address is set to “hide” when the profiles are on.

So, what would interest me now is how the screenshot of @wwe came about … (I could have sworn I saw exactly that on my cloud when I tested it earlier…)

1 Like

I think it needs to be configured here:
image

Also see Profile configuration — Nextcloud latest Administration Manual latest documentation

nothing special - on my NC 27.0.2.1 as Willi user I changed the profile setting “Email” from default “logged in users” to “hide” and the email disappeared in the “file share” user picker.

But thank to @szaimen I know where the strange statement “required for core functionality” comes from :wink:

nevertheless you can choose “hide” in the profile settings on the bottom of personal settings page and this is how I get rid of the email address in the search dialog.

1 Like

It doesn’t work for me (or Test2 in this case):

Test3 still sees the mail-address of Test2:
grafik

At least on 27.1.0 the setting I’d asume would achieve that is greyed out…

Bildschirmfoto vom 2023-09-15 11-46-35

Hmm that doesn’t seem to have any effect on my test instance either.

Bildschirmfoto vom 2023-09-15 11-51-40

Will try that…

just tested - it seems the user who changed the setting (or maybe both) must logout/login to apply the setting

Still it doesn’t work for me. I logged of with both users and logged in again. Still the mail-addresses are visible to anyone

Hmm, are you sure? Because I believe I found out why it doesn’t show an email address on your screenshot. If you already shared something with someone, it will show the respective user as a suggestion directly in the share dialogue on which it won’t show you the email address. But if you search actively for this user you are most likely going to see the email address…

Bildschirmaufzeichnung vom 2023-09-15, 16-39-48

In the meantime I think it’s not possible, or at least I didn’t manage to do it, and I tried everything that was suggested in this thread.

I’m sorry if I caused confusion, but I got confused by the above screen and actually thought that the email address was not showing because the profiles were disabled and therefore the email addresses also were not showing anywhere else, which I now think was never the case.

Thanks for all your testing. I wasn’t sure, if I was totally wrong. If it’s not possible, I should do a feature request, I think :smiley:

1 Like

really funny: I can’t hide the email of a new user using the steps above… today morning one user could hide and show the email based on profile email setting - now using new user email is always shown :man_facepalming: even after sharing a file with the user (and receiving a file share from this user) no idea what happens…

I still don’t think this is a problem, others who feel this is an issue must dig deeper into the issue…

1 Like