Improved protection of user data

[Elina]

Effective from July 14, 2020

---

We have now improved the security of user data.

What has changed?

When returning the User object, the following API endpoints

• GET /users
• GET /users/{id}
• POST /users
• PUT /users/{id}

will have all fields except for id, name and email set to null if the user is unverified in the company (which is always the case for the POST /users endpoint).

This also affects the endpoints of other entities such as Deals, Persons, Organizations, Notes, etc., which may contain related User objects.

---

Find more detailed information about who is affected by this change here!