the email in the revent activity should be visible only to superusers, staff and...

[osqa.git] / forum / actions / user.py

diff --git a/forum/actions/user.py b/forum/actions/user.py
index 3366a6cf360fc212ff4401e541f499ef332d6219..c8e075cfd5ad74e28bae2025754744c41435f67c 100644 (file)
--- a/forum/actions/user.py
+++ b/forum/actions/user.py
@@ -46,7 +46,7 @@ class EmailValidationAction(ActionProxy):
         return _("%(user)s %(have_has)s validated the e-mail %(email)s") % {
         'user': self.hyperlink(self.user.get_profile_url(), self.friendly_username(viewer, self.user)),
         'have_has': self.viewer_or_user_verb(viewer, self.user, _('have'), _('has')),
-        'email' : self.user.email
+        'email' : self.user.email if viewer.is_superuser or viewer.is_staff or viewer == self.user else ""
         }
 
 class EditProfileAction(ActionProxy):