Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit ad0b4cc1 authored by Ronak Patel's avatar Ronak Patel
Browse files

Restrict user to change primary email address

parent 01e8115d
Loading
Loading
Loading
Loading
Loading
+1 −0
Original line number Diff line number Diff line
@@ -207,6 +207,7 @@ RUN cd ${BASE_DIR} && patch -u ${BASE_DIR}/apps/user_ldap/lib/User_LDAP.php -i $
RUN patch -u ${BASE_DIR}/lib/private/User/Manager.php -i ${TMP_PATCH_DIR}/025-optimize-get-by-email.patch
RUN patch -u ${BASE_DIR}/apps/dav/lib/Connector/Sabre/Principal.php -i ${TMP_PATCH_DIR}/027-displayname-user-leak-dav.patch
RUN patch -u ${BASE_DIR}/apps/dav/lib/HookManager.php -i ${TMP_PATCH_DIR}/028-default-task-calendar.patch
RUN patch -u ${BASE_DIR}/apps/provisioning_api/lib/Controller/UsersController.php -i ${TMP_PATCH_DIR}/029-restrict-user-to-change-primary-email.patch
RUN rm -rf ${TMP_PATCH_DIR}

RUN curl -fsSL -o ldap_write_support.tar.gz \
+20 −0
Original line number Diff line number Diff line
--- ./apps/provisioning_api/lib/Controller/UsersController.php	2023-10-03 07:14:02
+++ ./apps/provisioning_api/lib/Controller/UsersController-new.php	2023-10-03 10:00:19
@@ -756,11 +756,15 @@
 					$permittedFields[] = self::USER_FIELD_DISPLAYNAME;
 					$permittedFields[] = IAccountManager::PROPERTY_DISPLAYNAME;
 				}
-				$permittedFields[] = IAccountManager::PROPERTY_EMAIL;
+				if ($this->config->getSystemValue('allow_user_to_change_email', true) !== false) {
+					$permittedFields[] = IAccountManager::PROPERTY_EMAIL;
+				}
 			}
 
 			$permittedFields[] = IAccountManager::PROPERTY_DISPLAYNAME . self::SCOPE_SUFFIX;
-			$permittedFields[] = IAccountManager::PROPERTY_EMAIL . self::SCOPE_SUFFIX;
+			if ($this->config->getSystemValue('allow_user_to_change_email', true) !== false) {
+				$permittedFields[] = IAccountManager::PROPERTY_EMAIL . self::SCOPE_SUFFIX;
+			}
 
 			$permittedFields[] = IAccountManager::COLLECTION_EMAIL;