A scheduled report reaches a colleague who signs in on another domain (SITP TP16 live smoke)

Shipped

October 18, 2026 at 7:10 PM UTC

Author

Kamo

Commit

7433b44

reports_schedule judged a colleague by the organization's mail domains alone, so in sp00verify the owner's own sign-in address was refused as an outsider. A recipient is now a colleague when the address is on the organization's domains, reaches a member's mailbox (emailservice), or is an active member's own email (SecurityService's directory, exact match); anyone else still gets the export-and-mail_send answer.