Running 5.3 on Drupal 7.

Is there any built in way to disable the ability for authenticated users to send an email?

Currently they can only view their own contact, but the action menu still has an option to send an email. Supposedly the permission is tied in with the "View All Contacts" permission, however that does not block them from sending an email.

  • Do you mean users were able to send emails even after removing view all contacts permission? – jitendra - fuzion Aug 29 '18 at 10:06
  • Yes, that is correct. They are limited to sending it to their contact, but we see potential security issues with that. – Sleewok Aug 30 '18 at 14:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.