owncloud / owncloud/android

[BUG] Android shows user email addresses even when oCIS is configured to hide them

Open
#4,780 9 comments 0 reactions 1 assignee View on GitHub

@joragua is already working on this.

Since Feb 24, 2026.

Needs info Type:bug
Dominant language
Kotlin
Stars
4.2k
Forks
3.1k
Avg merge
1d 12h
Merged PRs (30d)
7

Description

Problem

Android shows user email addresses even when oCIS is configured to hide them.

This is a privacy / information disclosure issue and a client-server behavior mismatch.

Expected behavior

If oCIS disables email visibility, Android must not render email addresses anywhere in the UI (sharee search, share dialogs, member lists, mentions, etc.).

Actual behavior

Android still displays email addresses although the oCIS setting is disabled.

Engineering scope

Please implement and verify the full propagation path:

  1. oCIS config: email-visibility setting is configured in frontend/web config (WEB_OPTION_* / WEB_UI_CONFIG_FILE)
  2. Capabilities/API: effective value is exposed to clients (or add a stable capability flag)
  3. Android parsing: Android reads/stores the flag
  4. UI enforcement: all user/sharee UI rendering respects the flag
  5. Tests: regression coverage for both states (show/hide email)

Acceptance criteria

  • Android respects the oCIS email-visibility capability/setting
  • No email addresses are shown when disabled
  • Email display still works when enabled
  • Regression tests added
  • Capability key / endpoint used is documented

Impact

Privacy / information disclosure (personal email addresses shown despite server-side policy).

Environment

  • Server: oCIS
  • Client: ownCloud Android
  • Type: Bug / Privacy

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.