Bind exportMailAddress bulk process to `canEditMailAddress` instead of `canMailUser`

Unfortunately the `permissions` form a logical disjunction, not a conjunction,
thus we can't check both permissions. The `canEditMailAddress` is more fitting,
because even without `canMailUser` the admin could simply look up all users
manually if they are allowed to edit (and thus see) mail addresses. It's just a
larger effort.

Resolves #3963

diff --git a/com.woltlab.wcf/objectType.xml b/com.woltlab.wcf/objectType.xml
index 83c353b2af73c4ac0dc410fa7d80d1e3cd0e581c..50c20e882ad7e9f98bec50de780b243015ee7c56 100644 (file)
--- a/com.woltlab.wcf/objectType.xml
+++ b/com.woltlab.wcf/objectType.xml
@@ -1246,7 +1246,7 @@
                        <definitionname>com.woltlab.wcf.bulkProcessing.user.action</definitionname>
                        <classname>wcf\system\bulk\processing\user\ExportMailAddressUserBulkProcessingAction</classname>
                        <action>exportMailAddress</action>
-                       <permissions>admin.user.canMailUser</permissions>
+                       <permissions>admin.user.canEditMailAddress</permissions>
                </type>
                <!-- /user bulk processing actions -->
                <!-- user bulk processing conditions -->