mattermost/mattermost-plugin-channel-export

Export bypasses privacy settings

jupenur opened this issue · 0 comments

Channel exports always include users' email addresses. If PrivacySettings.ShowEmailAddress is false and the user doing the exporting is not the system admin, this should not be the case.

When privacy settings disallow email address display, channel exports can be used to dump email addresses in bulk.