Project Member
Reported by
zaro0508,
Jan 8 (2 days ago)
Affected Version: 2.11 and master
What steps will reproduce the problem?
1. execute the accounts REST endpoint with a registered user account to list emails:
curl --digest --user $username:$http_password http://localhost:8080/a/accounts/$username/emails
result is: "not allowed to list email addresses"
however using 'self' in url will work fine:
curl --digest --user $username:$http_password http://localhost:8080/a/accounts/self/emails
What is the expected output? What do you see instead?
I would expect that this operation is allowed when using either 'self' or the user's username in the url.
Owner: zaro0508