From c36b8fbabf6270936be86bd6307c07689dabfe44 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Thu, 23 Apr 2026 10:07:32 +0200
Subject: [PATCH] Fix membershiip privacy bug on production

---
 app/config/console.php                                |  5 +++++
 .../Platform/Modules/Teams/Http/Memberships/Get.php   | 11 ++++++-----
 .../Platform/Modules/Teams/Http/Memberships/XList.php | 11 ++++++-----
 3 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/app/config/console.php b/app/config/console.php
index 0b0d6c5881..b7a3f2195a 100644
--- a/app/config/console.php
+++ b/app/config/console.php
@@ -34,6 +34,11 @@ $console = [
     'legalAddress' => '',
     'legalTaxId' => '',
     'auths' => [
+        'membershipsUserName' => true,
+        'membershipsUserEmail' => true,
+        'membershipsMfa' => true,
+        'membershipsUserId' => true,
+        'membershipsUserPhone' => true,
         'mockNumbers' => [],
         'invites' => System::getEnv('_APP_CONSOLE_INVITES', 'enabled') === 'enabled',
         'limit' => (System::getEnv('_APP_CONSOLE_WHITELIST_ROOT', 'enabled') === 'enabled') ? 1 : 0, // limit signup to 1 user
diff --git a/src/Appwrite/Platform/Modules/Teams/Http/Memberships/Get.php b/src/Appwrite/Platform/Modules/Teams/Http/Memberships/Get.php
index d146684a20..49f9a36507 100644
--- a/src/Appwrite/Platform/Modules/Teams/Http/Memberships/Get.php
+++ b/src/Appwrite/Platform/Modules/Teams/Http/Memberships/Get.php
@@ -70,12 +70,13 @@ class Get extends Action
             throw new Exception(Exception::MEMBERSHIP_NOT_FOUND);
         }
 
+        // Default should be "false", but existing projects already relay on this being "true"
         $membershipsPrivacy =  [
-            'userName' => $project->getAttribute('auths', [])['membershipsUserName'] ?? false,
-            'userEmail' => $project->getAttribute('auths', [])['membershipsUserEmail'] ?? false,
-            'mfa' => $project->getAttribute('auths', [])['membershipsMfa'] ?? false,
-            'userId' => $project->getAttribute('auths', [])['membershipsUserId'] ?? false,
-            'userPhone' => $project->getAttribute('auths', [])['membershipsUserPhone'] ?? false,
+            'userName' => $project->getAttribute('auths', [])['membershipsUserName'] ?? true,
+            'userEmail' => $project->getAttribute('auths', [])['membershipsUserEmail'] ?? true,
+            'mfa' => $project->getAttribute('auths', [])['membershipsMfa'] ?? true,
+            'userId' => $project->getAttribute('auths', [])['membershipsUserId'] ?? true,
+            'userPhone' => $project->getAttribute('auths', [])['membershipsUserPhone'] ?? true,
         ];
 
         $roles = $authorization->getRoles();
diff --git a/src/Appwrite/Platform/Modules/Teams/Http/Memberships/XList.php b/src/Appwrite/Platform/Modules/Teams/Http/Memberships/XList.php
index 70b78e02c6..816ca53e3a 100644
--- a/src/Appwrite/Platform/Modules/Teams/Http/Memberships/XList.php
+++ b/src/Appwrite/Platform/Modules/Teams/Http/Memberships/XList.php
@@ -123,12 +123,13 @@ class XList extends Action
 
         $memberships = array_filter($memberships, fn (Document $membership) => !empty($membership->getAttribute('userId')));
 
+        // Default should be "false", but existing projects already relay on this being "true"
         $membershipsPrivacy =  [
-            'userName' => $project->getAttribute('auths', [])['membershipsUserName'] ?? false,
-            'userEmail' => $project->getAttribute('auths', [])['membershipsUserEmail'] ?? false,
-            'mfa' => $project->getAttribute('auths', [])['membershipsMfa'] ?? false,
-            'userId' => $project->getAttribute('auths', [])['membershipsUserId'] ?? false,
-            'userPhone' => $project->getAttribute('auths', [])['membershipsUserPhone'] ?? false,
+            'userName' => $project->getAttribute('auths', [])['membershipsUserName'] ?? true,
+            'userEmail' => $project->getAttribute('auths', [])['membershipsUserEmail'] ?? true,
+            'mfa' => $project->getAttribute('auths', [])['membershipsMfa'] ?? true,
+            'userId' => $project->getAttribute('auths', [])['membershipsUserId'] ?? true,
+            'userPhone' => $project->getAttribute('auths', [])['membershipsUserPhone'] ?? true,
         ];
 
         $roles = $authorization->getRoles();