Audit mail sent from an address that isn't the sender's own

jcoffey-dev commented

2026-10-05 21:07:39 +00:00

Owner

A group's members can send as the group, and the message says only
From: the group, so nothing recorded which person sent it. Every
submission whose envelope sender belongs to another account now writes
an audit record: the person as actor, an EmailSubmission target named
by the address and owned by that account, and "Sent as

",
with ", from " when it went out through the sender's own
account rather than the group's.

A delegate's send is left to AL-9's record, and a send from the
sender's own address writes nothing. No Sender: header is added: the
audit log is where the real sender is named. email_submission_set now
takes the access token, from its one caller.

The audit suite has a group member send once as the group (one
record, with the address, account and details) and once as themselves
(none) (specs/multi-account.md, MA-D0a, G2).

A group's members can send as the group, and the message says only From: the group, so nothing recorded which person sent it. Every submission whose envelope sender belongs to another account now writes an audit record: the person as actor, an EmailSubmission target named by the address and owned by that account, and "Sent as <address>", with ", from <account>" when it went out through the sender's own account rather than the group's. A delegate's send is left to AL-9's record, and a send from the sender's own address writes nothing. No Sender: header is added: the audit log is where the real sender is named. email_submission_set now takes the access token, from its one caller. The audit suite has a group member send once as the group (one record, with the address, account and details) and once as themselves (none) (specs/multi-account.md, MA-D0a, G2).

jcoffey-dev added 1 commit 2026-10-05 21:07:39 +00:00

Audit mail sent from an address that isn't the sender's own

ci / github (pull_request) Skipped

Details

ci / fork-checks (pull_request) Successful in 48s

Details

ci / build (pull_request) Successful in 8m50s

Details

github/ci (branch) GitHub Actions

Details

76c170db9d

A group's members can send as the group, and the message says only
From: the group, so nothing recorded which person sent it. Every
submission whose envelope sender belongs to another account now writes
an audit record: the person as actor, an EmailSubmission target named
by the address and owned by that account, and "Sent as <address>",
with ", from <account>" when it went out through the sender's own
account rather than the group's.

A delegate's send is left to AL-9's record, and a send from the
sender's own address writes nothing. No Sender: header is added: the
audit log is where the real sender is named. email_submission_set now
takes the access token, from its one caller.

The audit suite has a group member send once as the group (one
record, with the address, account and details) and once as themselves
(none) (specs/multi-account.md, MA-D0a, G2).

jcoffey-dev merged commit 1aedc77791 into main

2026-10-05 21:21:17 +00:00

jcoffey-dev deleted branch fix/audit-send-as

2026-10-05 21:21:17 +00:00

jcoffey-dev referenced this pull request

2026-10-05 23:29:22 +00:00

Release 2026.10.5.1 #152

Audit mail sent from an address that isn't the sender's own #144