Constituent Code Security should impact email capability. If you can't see an account, you shouldn't be able to email the account.

Right now, if a user emails a list that includes constituents that they don't have the right to see (through constituency security), the email will go to everyone in the list rather than ONLY the constituents they see. This is a huge liability to not have this safeguard in place. (We have a user who recently selected the wrong list and ended up emailing the entire database instead of only the subset they are able to see.)

  • Caitlin Schwanda
  • Dec 19 2025
  • Attach files