I'm going to propose an API change that is not backward compatible, however I think the behavior can be considered a defect. Currently when [trac] show_email_addresses
is False
, Chrome.format_author
will not obfuscate the email when req
is None
: tags/trac-1.1.6/trac/web/chrome.py@:1297-1298#L1277.
I think that is undesirable. Instead, the value of [trac] show_email_addresses
should always be used when req
is None
and permissions cannot be checked. I propose that the value of [trac] show_email_addresses
should always be used, and only overridden when permissions can be checked (for the resource).