2h ago
"Search for an existing member" exposes users and emails from other brigades
When adding a new member, a "Search for an existing member" appears that let's us search for existing members. I noticed that name and email of members from other brigades appear in the result when I type a name in the search box.
Shouldn't this be limited to you own brigade? How can I ensure that details from brigade members are not available for others to see?
In Progress
This is intentional to support members who respond/interact with multiple brigades. A member may already be added to StationOne by a brigade, before their primary brigade is on the platform. This prevents any issues from the member getting two accounts, which was previously a big issue. We might just add a bit of obfuscation to their email address.