SuiteCRM Email Address Management Critical Issue

[salman-tariq1]

Issue

We have identified a critical issue with email address management in SuiteCRM version 7.14.6.
Issue Description:
The problem involves inconsistencies in email address handling for users and user groups, including duplication, unintended updates, and deletions.

Possible Fix

No response

Steps to Reproduce the Issue

Example Case:
1. Add a user with an email address, e.g., [email protected].
2. Add the same email address ([email protected]) to a user group.
3. Update the user group email to a new address, e.g., [email protected], and save.
4. Navigate to the user profile. You will notice that the user’s email has also been updated to [email protected], even though it should remain unchanged.

Database Findings:
1. A new entry is created in the email_address table with the updated email ([email protected]) and a relationship with the user group.
2. The relationship with the old email is marked as deleted for the user group.
3. However, the old email in the email_address table is also updated to [email protected]. Due to its relationship with the user, the user profile also displays the updated email.

Additional Case:
1. Add 5–6 emails to a user group.
2. Remove one email (e.g., the second or third email) and save.
3. Upon editing the group again, you will see:
      Duplicate entries for the last two emails.
      The email following the deleted one is removed and replaced with a duplicate entry.

Context

No response

Version

7.14.6

What browser are you currently using?

Chrome

Browser Version

Chrome Version 127.0.6533.88 (Official Build) (64-bit)

Environment Information

MySQL 5.7, PHP 8.1

Operating System and Version

Ubuntu 20.04.2 LTS