[Address-Book] lists contacts from second google account without permission

Bug #1439041 reported by Felix Wilke
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu UX
Triaged
High
Olga Kemmet
address-book-app (Ubuntu)
Confirmed
High
Unassigned

Bug Description

Hello,
I am using the BQ phone. I have two google accounts registered in my online-accounts. The first account has access to all applications listed in online accounts. The second account is supposed to deliver only the calendar events of my wife. Hence I enabled for the second account only access to "calendar" and "com.ubuntu.developer...".

However my address-book lists all contacts of my wife even though no access is granted in online accounts.

The behavior not only affects the usability but is also a security issue.

Tags: bq
Felix Wilke (felixw83)
information type: Private Security → Public
tags: added: bq
information type: Public → Public Security
Changed in address-book-app (Ubuntu):
importance: Undecided → Medium
importance: Medium → Undecided
Changed in address-book-app (Ubuntu):
importance: Undecided → High
Changed in address-book-app (Ubuntu):
status: New → Confirmed
Revision history for this message
Renato Araujo Oliveira Filho (renatofilho) wrote :

You can enable/disable contacts sync using the online-account screen. After you enable it once, all contacts will be synced to your device. Disabling it will block the contacts sync to happen in the future, but it will still visible on your contact list.

Until now we do not have a option to disable the contacts from a specific account to appear on your contact list.

I will add UX-team to the bug, they can help us to figure out a solution for that.

Changed in ubuntu-ux:
assignee: nobody → Olga Kemmet (olga-kemmet)
status: New → Triaged
importance: Undecided → High
summary: - Address-Book lists contacts from second google account without
+ [Address-Book] lists contacts from second google account without
permission
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.