Prevent non-admin issue responses exposing account identities

2026-09-07 19:45:19 +12:00
parent 131b5fc5c7
commit 13edcb8136
3 changed files with 74 additions and 3 deletions
@@ -2242,7 +2242,7 @@ export default function PortalClient({ workspace }: PortalClientProps) {
                    {selectedItem.kind === 'request' ? 'Request' : 'Issue'} #{selectedItem.id}
                  </h2>
                  <p className="lede">
-                    Created by {selectedItem.created_by_username} on {formatDate(selectedItem.created_at)}
+                    {isAdmin ? `Created by ${selectedItem.created_by_username} on ` : 'Reported on '}{formatDate(selectedItem.created_at)}
                  </p>
                  {selectedItem.kind === 'issue' ? (
                    <p className="lede">