How can I conceal User email addresses from other users

Many web based systems with many users do not, by default, reveal certain aspects of a user's personal data. So for instance on Facebook a user's email address is not visible to other users.

We want to get to that situation wrt our Foswiki users; we have guest access for read-only but all Editors must have a personal logon.
We want to record email addresses against users in order to enable features like user able to reset own password.

Right now the default position is that anyone using the system, even guests, can find the email address of any users.

We would like to have the situation that only the signed-on user and the Admins can view email addresses of users. This would strengthen our #GDPR position too.

I have looked through FAQs, Extensions & co but have not seen anything relelvant.

Thanks

-- JohnEdge - 25 Mar 2021

Use

$Foswiki::cfg{AntiSpam}{HideUserDetails} = 1;

See SecurityFeatures

-- MichaelDaum - 25 Mar 2021

I have installed and enabled the plugin "AntiWikiSpamPlugin", described here https://foswiki.org/Extensions/AntiWikiSpamPlugin

Can such config be done by an admin via https://SOMEHOSTNAME/bin/configure ?

-- JohnEdge - 25 Mar 2021

Ignore previous. I see where this is configured, eg on https://SOMEHOSTNAME/bin/configure interface in section "Security and Authentication", tab "Anti-spam". However I found that the "Hide User Details" was already set to TRUE (which is the default situation), with the email addresses visible to all. Do I need to update anything under "User mapping" (which seems to determine how the back end handles emails)? Thanks

-- JohnEdge - 25 Mar 2021

Email addressess will be hidden from normal users. Admins still can see them.

-- MichaelDaum - 25 Mar 2021