api: Improve handling of delivery_email in the GET /users/{email} API.

Limiting lookups by delivery_email to users with "everyone" email
visibility is overly simplistic. We can successfully do these lookups
whenever the requester has the permission to view the real email address
of the user they're looking up.
This commit is contained in:
Mateusz Mandera
2024-09-30 21:34:44 +02:00
committed by Tim Abbott
parent 8e51442043
commit 6c069f4365
6 changed files with 194 additions and 22 deletions

View File

@@ -20,6 +20,12 @@ format used by the Zulip server that they are interacting with.
## Changes in Zulip 10.0
**Feature level 302**
* [`GET /users/{email}`](/api/get-user-by-email): Changed the `email`
values by which users can successfully be looked up to match the
user email visibility setting's semantics better.
**Feature level 301**
* [`POST /register`](/api/register-queue), [`GET /events`](/api/get-events),