- Shipped
- August 7, 2026 at 6:15 AM UTC
- Author
- kamo
- Commit
- e933f7b
New Message opened the composer on the member's default mailbox: only onBehalfOf was passed, and only for another member's mailbox, so a personal or shared mailbox selected in the switcher was ignored outright. The open mailbox's address now rides along, which is what the personal and shared cases have to match on — they name no member. The From dropdown was also narrower than the switcher: send-as showed just that member's mailboxes and aliases, and the self case showed no privilege-based mailboxes at all. It now builds from the same /messages payload, with the same groups, order and labelling, gated on the same three rights. EmailService re-authorizes the mailbox on send (canAccessMailbox), so the list only has to agree with the switcher. Send identity follows the selection rather than the window's opening mailbox, so picking a colleague's mailbox switches the authenticated account, aliases and signature together. An alias keeps the identity already in force — previously it fell back to the opening mailbox, which would have authenticated as the wrong account after a switch.