Files
gerrit/java
Edwin Kempin 96750907d6 Account index: Add new field that contains name parts without secondary emails
In a follow-up change we want to hide secondary emails from users that
don't have the 'Modify Account' capability. For this we must also
disable querying accounts by secondary email. Otherwise one could search
for 'foo.com' to find all accounts that have a '*@foo.com' email
address.

Currently the NAME_PART field also contains the name parts of the
secondary email addresses. This means we must not use this field if the
calling user doesn't have the 'Modify Account' capability. However since
the NAME_PART field is needed for serving default queries and queries
with the 'name' operator we need a replacement for this field that
contains the name parts without secondary emails. This change adds this
field and create a new schema version.

This change is separate from the follow-up change that requires the
'Modify Account' capability to see secondary email addresses so that at
Google we can first upgrade the account index and only then rollout the
change that needs to new index field. The follow-up change also works
with old index versions, but can't support name queries by prefix
without the new field, which affect reviewer suggestion. Having this as
2 changes allows us to do the rollout without affecting users.

Change-Id: If0ac6daa87403d94025a31a37ddf0b118cd5b579
Signed-off-by: Edwin Kempin <ekempin@google.com>
2017-12-04 18:28:50 +01:00
..