Private Issues: Do not send emails to tagged users in an issue #656

Open
opened 2026-07-11 03:33:24 +00:00 by jflory7 · 0 comments
Contributor

Summary

If an issue reporter @at-tags someone, do NOT send that user an email with the contents of the private issue so that confidentiality is not broken.

Details

This may or may not already be resolved in the new solution. But one major issue we have with Pagure today is that if a user opens a private ticket and they tag someone in the body of the report, it will send the tagged user an email with the full contents of the comment body even if that user does not have access to the repository.

Ideally, for any user who is tagged in a private issue with appropriate view access, they should receive notifications if tagged. If the tagged user is NOT someone who can view the private issue, then they should also NOT get an email.

### Summary If an issue reporter @at-tags someone, do NOT send that user an email with the contents of the private issue so that confidentiality is not broken. ### Details This may or may not already be resolved in the new solution. But one major issue we have with Pagure today is that if a user opens a private ticket and they tag someone in the body of the report, it will send the tagged user an email with the full contents of the comment body even if that user does not have access to the repository. Ideally, for any user who is tagged in a private issue with appropriate view access, they should receive notifications if tagged. If the tagged user is NOT someone who can view the private issue, then they should also NOT get an email.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
forge/forge#656
No description provided.