pkg/models/user.go

@@ -58,6 +58,11 @@ type User struct {
 	web.Auth `xorm:"-" json:"-"`
 }
 
+// AfterLoad is used to delete all emails to not have them leaked to the user
+func (u *User) AfterLoad() {
+	u.Email = ""
+}
+
 // AuthDummy implements the auth of the crud handler
 func (User) AuthDummy() {}