contacts icon indicating copy to clipboard operation
contacts copied to clipboard

Contact full names and emailadresses are visible in the adressbook for all users even hidden by user

Open HarryVahle opened this issue 8 months ago • 2 comments

Describe the bug

Especially the emailadresses should be hidden for normal users, when a user selected to hide the information. But this doesn´t work. It is a datasafety problem in Germany if you use this for example with parents in a school.

This should be fixed as soon as possible. Thank you in advance

Steps to reproduce

Click on Adressbook an see all the entries

Expected behavior

the emailadresses should be not shown

Actual behavior

the emailadresses are visible

Contact version

No response

Operating system

W11

PHP engine version

None

Web server

None

Database

None

Additional info

No response

HarryVahle avatar Apr 11 '25 16:04 HarryVahle

Hi @HarryVahle

Are you referring to system contacts or shared contacts or personal contacts?

SebastianKrupinski avatar Apr 14 '25 14:04 SebastianKrupinski

Dear Sebastian,

I was refering tot he contacts adressbook like the screnshot below. I found out that you can hide the Person itself, but if you want to be found as a member of the nexcloud instance, there is additional the emailadress shown, where is no need for to show. It would be enough to see the user name. Kann we hide the emailadress in the adress – list?

For the background: We are a school and want to have all our parents in this nextcloud, but don´t want that every parent can see the emailadress of the other. This would be not in accordance with the Data Safety Regulations.

If you are only in a company this is no problem (like the adresses with „huckepack-ev.de“, but in our case it is, because these are private adresses.

Thank you fort he quick response.

Kind regards, Harry

@.***

Von: Sebastian Krupinski @.> Gesendet: Montag, 14. April 2025 16:21 An: nextcloud/contacts @.> Cc: Harry Vahle @.>; Mention @.> Betreff: Re: [nextcloud/contacts] Contact full names and emailadresses are visible in the adressbook for all users even hidden by user (Issue #4429)

HINWEIS: Diese E-Mail kam von außerhalb der Organisation. Klicken Sie nicht auf Links oder öffnen Sie keine Anhänge, es sei denn, Sie kennen den Absender und wissen, dass der Inhalt sicher ist.

Hi @HarryVahlehttps://github.com/HarryVahle

Are you referring to system contacts or shared contacts or personal contacts?

— Reply to this email directly, view it on GitHubhttps://github.com/nextcloud/contacts/issues/4429#issuecomment-2801879118, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BRNFA5PRHAC2E5XHRK73W4T2ZO74JAVCNFSM6AAAAAB26VSDF2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQMBRHA3TSMJRHA. You are receiving this because you were mentioned.Message ID: @.@.>> [https://avatars.githubusercontent.com/u/165827823?s=20&v=4]SebastianKrupinski left a comment (nextcloud/contacts#4429)https://github.com/nextcloud/contacts/issues/4429#issuecomment-2801879118

Hi @HarryVahlehttps://github.com/HarryVahle

Are you referring to system contacts or shared contacts or personal contacts?

— Reply to this email directly, view it on GitHubhttps://github.com/nextcloud/contacts/issues/4429#issuecomment-2801879118, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BRNFA5PRHAC2E5XHRK73W4T2ZO74JAVCNFSM6AAAAAB26VSDF2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQMBRHA3TSMJRHA. You are receiving this because you were mentioned.Message ID: @.@.>>

HarryVahle avatar Apr 14 '25 15:04 HarryVahle

I was refering tot he contacts adressbook like the screnshot below.

Hi, there seems to be no screen capture attached.

SebastianKrupinski avatar Jun 26 '25 15:06 SebastianKrupinski

Dear Sebastian,

no I didn´t attach a screenshot because it was obvious. I need an information how to hide the user emailadress in the overall adressbook. Unfortunately it ist only possible right now to either hide all the adresses and find no user or not to hide an find all users with emailadress.

Because of Data Safety regulations I need to hide the emailadress from the parents for normal users of our school, which should get a user in the nextcloud.

Kind regards, Harry

Von: Sebastian Krupinski @.> Gesendet: Donnerstag, 26. Juni 2025 17:18 An: nextcloud/contacts @.> Cc: Harry Vahle @.>; Mention @.> Betreff: Re: [nextcloud/contacts] Contact full names and emailadresses are visible in the adressbook for all users even hidden by user (Issue #4429)

HINWEIS: Diese E-Mail kam von außerhalb der Organisation. Klicken Sie nicht auf Links oder öffnen Sie keine Anhänge, es sei denn, Sie kennen den Absender und wissen, dass der Inhalt sicher ist.

[https://avatars.githubusercontent.com/u/165827823?s=20&v=4]SebastianKrupinski left a comment (nextcloud/contacts#4429)https://github.com/nextcloud/contacts/issues/4429#issuecomment-3008860826

I was refering tot he contacts adressbook like the screnshot below.

Hi, there seems to be no screen capture attached.

— Reply to this email directly, view it on GitHubhttps://github.com/nextcloud/contacts/issues/4429#issuecomment-3008860826, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BRNFA5L7HCZ6U7SJNPTOVRD3FQFLZAVCNFSM6AAAAAB26VSDF2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAMBYHA3DAOBSGY. You are receiving this because you were mentioned.Message ID: @.@.>>

HarryVahle avatar Jun 26 '25 18:06 HarryVahle

@HarryVahle I was just made aware by one of my users that they could see all the other users on the server. It seems like this feature was introduced in NextCloud 27, but may be switched off globally. occ config:app:set dav system_addressbook_exposed --value="no" I really hope this helps you as well. Source https://help.nextcloud.com/t/how-to-delete-the-accounts-address-book/168074/5

Or do you wish to still see all users, but to just to hide the email addresses?

grisumedia avatar Jul 24 '25 12:07 grisumedia

Hi there! It looks like this issue hasn’t seen much activity for a while and might need a bit more information to move forward. If we don’t hear back soon, we may close it to keep things organized. Thanks again for your contributions – we really appreciate it!

nextcloud-command avatar Aug 24 '25 00:08 nextcloud-command

Yes, i Need to hide the emailadresses, but See the names.

HarryVahle avatar Aug 24 '25 11:08 HarryVahle

Hi there! It looks like this issue hasn’t seen much activity for a while and might need a bit more information to move forward. If we don’t hear back soon, we may close it to keep things organized. Thanks again for your contributions – we really appreciate it!

nextcloud-command avatar Sep 25 '25 00:09 nextcloud-command