Data privacy question: visibility of user emails

I think many users run into this question.

I have an object workspace-A created by User-A and he wants to share this workspace with another user-B. This works well, by using standard privacy rules, by just having a list of member users on the workspace object and then setting a rule accordingly.

Although user-B will see the workspace, he cannot see who created the workspace (workspace.creator[User]) since users can only see their own data. There are now 2 solutions

A.) create workspace.owner_email [str] field and make it visible
B.) set privacy rule: User: must be loggedin. View: email, but deactivate “Find in Searches”

Is option B) safe enough to use?

Hey @geo1,

Something that I do, which I’m not sure if it’s the perfect solution, but it’s what works for me is I create a separate data type for multi-tentant apps called a “User Profile” or “Alias” that has some specific fields attached to it like:

  • The User
  • First Name
  • Last Name
  • Email
  • Organization

The reason I do this is so only the people in the same organization (and has admin or the appropriate permission) can view specific things about the user. The condition I set for this in privacy rules is: This user's profile's organization is Current user's lastLoggedInProfile (the type being the same as User’s Profile).

Curious how others do it :blush:

2 Likes

what if a user changes his name, do you have to copy that value to the profile object?

Yep, but there’s also the option for the admin to change their name just in case they prefer a different name

well you can just have all the user information on the profile object, giving you more flexibility. You might just have to sync the user.email field with the profile.email field. probably a viable option. But not obvious when starting with bubble :frowning:

well my rationale with that is my app actually has someone fill out an application before being a part of that org and they may prefer a different email to use at that org for communication vs. the email they use to log into their overall account

what about the option B.) set privacy rule: User: must be loggedin. View: email, but deactivate “Find in Searches”

Any feedback on this?