I have a web app where-in all users and group emails under a given
google apps account are being fetched using provisioning API.
When a user inputs a team email address in UI, it is automatically
expanded to the email address of all members in that group.
e.g.
Say group email is:
g...@example.com
Members of group are:
a...@example.com (member)
d...@example.com (member)
i...@example.com (owner)
When a user (say
a...@example.com) logs in my app and writes
'...@
example.com', it is replaced by
'
a...@example.com,
d...@example.com,
i...@example.com'
Now if the group is of type 'announcement', will it be a good idea
(from security point of view) to expand group email?
Please let me know your thoughts.