| @@ -85,8 +85,13 @@ | ||
| 85 | 85 | } |
| 86 | 86 | |
| 87 | 87 | public function searchNonBoardWordpressUsers() |
| 88 | 88 | { |
| 89 | + // This enumerates every WordPress user with their email; only user managers may see it. | |
| 90 | + if (!current_user_can('list_users')) { | |
| 91 | + return []; | |
| 92 | + } | |
| 93 | + | |
| 89 | 94 | $superAdmin = Relation::select('user_id')->distinct()->pluck('user_id'); |
| 90 | 95 | $users = User::whereDoesntHave('boards')->whereNotIn('ID', $superAdmin)->get(); |
| 91 | 96 | |
| 92 | 97 | $formattedUsers = []; |