Is it possible to hide sent/received emails from activity log on case-by-case basis before email details are loaded to page?
I have a requirement where some incidents, that meet certain criteria, cannot be fully shown to users who are not part of said incident. All users can see some details of the ticket (number, assignment group, assigned to) but only select people can see the ticket in full.
This is easy enough to do with ACLs and activity log respects these ACLs...
...with the exception of sent/received emails.
I have tried creating an ACL to sys_email table that checks if the criteria are met for the user but while I can prevent user from seeing the sys_email-record itself, activity log bypasses the ACL when it comes to emails. So it still shows senders address and other details and the show email details -link will show the full email with no regard for ACLs.
One "solution" I have is to on client side during onLoad remove the emails' html elements from the page. But this happens after the emails contents have been loaded to page so somebody with know-how can still read the identifying details from the email from the browsers console.
Anybody got any ideas how to go about blocking the email details from being sent to client that should not see these email details?
