twenty
twenty copied to clipboard
Email visibility not restricted in Companies & People email tab
Description: Currently, in the Companies and People modules under the Email tab, all users can view emails received by any person. This leads to a privacy concern, as emails are globally visible to all users.
Expected Behavior: Emails should only be visible to users who are part of the email conversation (i.e., sender, recipient, or CC). All other users should not be able to view those emails.
Steps to Reproduce:
- Go to the Companies or People module.
- Open the Email tab.
- Observe that all emails are visible to every user, regardless of whether they are part of the conversation.
Proposed Solution: Restrict email visibility so that only users involved in the email (sender/recipient/CC) can see it.