Attendees invite to a calendar event will autosuggest everyone (data protection issue)

ℹ️ Support
,
1
Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart:

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
  • Operating system and version (e.g., Ubuntu 24.04):
    • Linux 6.1.0-25

Summary of the issue you are facing:

Is there a way to disable auto-suggestions in the invite attendees dropdown menu?

I am managing a large nextcloud instance with lots of groups and users.
All the groups are separated from each other. Users only need to be able to interact with people from their group and should not be able to know about users in other groups.

Share settings are set accordingly. But in the Attendees dropdown inside of a calendar event autosuggest will show everyone from every group including their email. Apparently invites are not affected by share settings.

This is a big data protection problem and it persists even if the Share-API is disabled. It makes using the calendar app unfit for my use case.

Is this desired behaviour or am I missing something?

Steps to replicate it (hint: details matter!):

  1. Open an event in the calendar

  2. Type any letter in the attendees dropdown menu

  3. Autosuggest will show everyone in the nextcloud instance that matches the letter

2

Hey @Unsure welcome to the Nextcloud community forum,

try “Contact-Settings, hide Systemaddressbook” will prevent system users from being displayed and only show personal-addressbook when creating an event in personal calendar.

grafik
grafik943×671 31.4 KB

4

Thanks for the reply, but this seems to be a user specific setting. Even if i would disable it for all users (which is not an option), couldn’t they just turn it back on?

5

you’re quite right… :thinking:

see Disable or restrict the system account addressbook seems similar?

sorry… try this:

grafik
grafik1434×736 104 KB

6

No, unfortunately it ignores any global setting made for sharing. As I wrote before even switching off the Share-API does have no effect.

7

@Unsure be patient there are some really clued up folks here who’ll certainly be able to help.

any chance you’ll be upgrading soon? its difficult comparing old versions and we might be chasing phantoms. if its something that was resolved… you’re a little behind Maintenance and Release Schedule · nextcloud/server Wiki · GitHub

8

I’m not the host. So I can’t tell right now. But I will inquire about the update plans.

I did a pretty thorough search in this forum and on github. I could not find anything that mentioned this specific problem.

Calendar Invitations: Restricting invitee auto-completion to group members