Make "Allow Directory Queries" apply to regular users #282

Merged

jcoffey-dev merged 1 commits from fix/directory-queries-off into main

2026-11-01 23:35:36 +00:00

Author	SHA1	Message	Date
jcoffey-dev	4e3c0582b8	Make "Allow Directory Queries" apply to regular users ci / fork-checks (pull_request) Skipped Details ci / build (pull_request) Skipped Details github/ci (branch) GitHub Actions Details ci / github (pull_request) Successful in 10m46s Details With the setting off, Principal/query, Principal/get, Principal/getAvailability and DAV principal-property-search still answered anyone holding the matching permission, and every default user role holds those. So any user could list the accounts in their tenant. Off now means off, except for accounts holding sysAccountQuery, which can list accounts anyway. Principal/get and getAvailability still answer for the account itself, its groups and whoever shared with it. /api/account reports the same thing the server now does. principal-match and acl-principal-prop-set aren't directory reads, so the setting doesn't apply to them. Their checks never fired and are gone.	2026-11-01 16:23:31 -07:00

Author

SHA1

Message

Date

jcoffey-dev

4e3c0582b8

Make "Allow Directory Queries" apply to regular users

ci / fork-checks (pull_request) Skipped

Details

ci / build (pull_request) Skipped

Details

github/ci (branch) GitHub Actions

Details

ci / github (pull_request) Successful in 10m46s

Details

With the setting off, Principal/query, Principal/get,
Principal/getAvailability and DAV principal-property-search still answered
anyone holding the matching permission, and every default user role holds
those. So any user could list the accounts in their tenant.

Off now means off, except for accounts holding sysAccountQuery, which can list
accounts anyway. Principal/get and getAvailability still answer for the
account itself, its groups and whoever shared with it. /api/account reports the
same thing the server now does.

principal-match and acl-principal-prop-set aren't directory reads, so the
setting doesn't apply to them. Their checks never fired and are gone.

2026-11-01 16:23:31 -07:00