OpenStackweb · smarcet · Sep 8, 2026 · Sep 3, 2026 · Sep 3, 2026 · Sep 5, 2026
diff --git a/app/Audit/ConcreteFormatters/EntityUpdateAuditLogFormatter.php b/app/Audit/ConcreteFormatters/EntityUpdateAuditLogFormatter.php
@@ -132,7 +132,7 @@ public function format($subject, $change_set): ?string
                     });
                 } else if ($old_value instanceof PresentationSpeaker || $new_value instanceof PresentationSpeaker) {
                     $res[] = self::formatEntity($class_name, $prop_name, $old_value, $new_value, function ($value) {
-                        return " \"{$value->getFullName()} ({$value->getEmail()})\" ";
+                        return " \"{$value->getFullName(true)} ({$value->getEmail()})\" ";
                     });
                 } else if ($old_value instanceof File || $new_value instanceof File) {
                     $res[] = self::formatEntity($class_name, $prop_name, $old_value, $new_value, function ($value) {

diff --git a/app/Audit/ConcreteFormatters/FeaturedSpeakerAuditLogFormatter.php b/app/Audit/ConcreteFormatters/FeaturedSpeakerAuditLogFormatter.php
@@ -31,7 +31,7 @@ public function format($subject, array $change_set): ?string
         try {
             $speaker = $subject->getSpeaker();
             $speaker_email = $speaker ? ($speaker->getEmail() ?? 'unknown') : 'unknown';
-            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName() ?? '', $speaker->getLastName() ?? '') : 'Unknown';
+            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName(true) ?? '', $speaker->getLastName(true) ?? '') : 'Unknown';
             $speaker_name = trim($speaker_name) ?: $speaker_name;
             $speaker_id = $speaker ? ($speaker->getId() ?? 'unknown') : 'unknown';
 

diff --git a/app/Audit/ConcreteFormatters/PresentationFormatters/PresentationSpeakerAuditLogFormatter.php b/app/Audit/ConcreteFormatters/PresentationFormatters/PresentationSpeakerAuditLogFormatter.php
@@ -29,7 +29,7 @@ public function format($subject, array $change_set): ?string
         }
 
         try {
-            $full_name = sprintf("%s %s", $subject->getFirstName() ?? 'Unknown', $subject->getLastName() ?? 'Unknown');
+            $full_name = sprintf("%s %s", $subject->getFirstName(true) ?? 'Unknown', $subject->getLastName(true) ?? 'Unknown');
             $email = $subject->getEmail() ?? 'unknown';
             $speaker_id = $subject->getId() ?? 'unknown';
 

diff --git a/...esentationFormatters/PresentationSpeakerSummitAssistanceConfirmationAuditLogFormatter.php b/...esentationFormatters/PresentationSpeakerSummitAssistanceConfirmationAuditLogFormatter.php
@@ -32,7 +32,7 @@ public function format($subject, array $change_set): ?string
             $id = $subject->getId() ?? 'unknown';
 
             $speaker = $subject->getSpeaker();
-            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName() ?? '', $speaker->getLastName() ?? '') : 'Unknown Speaker';
+            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName(true) ?? '', $speaker->getLastName(true) ?? '') : 'Unknown Speaker';
             $speaker_email = $speaker ? ($speaker->getEmail() ?? 'unknown') : 'unknown';
             $speaker_name = trim($speaker_name) ?: $speaker_email;
 

diff --git a/app/Audit/ConcreteFormatters/SpeakerAssistanceAuditLogFormatter.php b/app/Audit/ConcreteFormatters/SpeakerAssistanceAuditLogFormatter.php
@@ -30,7 +30,7 @@ public function format($subject, array $change_set): ?string
 
         try {
             $speaker = $subject->getSpeaker();
-            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName() ?? '', $speaker->getLastName() ?? '') : 'Unknown';
+            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName(true) ?? '', $speaker->getLastName(true) ?? '') : 'Unknown';
             $speaker_email = $speaker ? ($speaker->getEmail() ?? 'unknown') : 'unknown';
             $speaker_name = trim($speaker_name) ?: $speaker_email;
             $speaker_id = $speaker ? ($speaker->getId() ?? 'unknown') : 'unknown';

diff --git a/app/Audit/ConcreteFormatters/SpeakerRegistrationRequestAuditLogFormatter.php b/app/Audit/ConcreteFormatters/SpeakerRegistrationRequestAuditLogFormatter.php
@@ -31,7 +31,7 @@ public function format($subject, array $change_set): ?string
         try {
             $email = $subject->getEmail() ?? 'unknown';
             $speaker = $subject->getSpeaker();
-            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName() ?? '', $speaker->getLastName() ?? '') : 'Unknown';
+            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName(true) ?? '', $speaker->getLastName(true) ?? '') : 'Unknown';
             $speaker_name = trim($speaker_name) ?: 'Unknown';
             $is_confirmed = $subject->isConfirmed();
 

diff --git a/app/Audit/ConcreteFormatters/SubmissionInvitationAuditLogFormatter.php b/app/Audit/ConcreteFormatters/SubmissionInvitationAuditLogFormatter.php
@@ -35,7 +35,7 @@ public function format($subject, array $change_set): ?string
             $full_name = trim(sprintf("%s %s", $first_name, $last_name)) ?: 'Unknown';
             $is_sent = $subject->isSent();
             $speaker = $subject->getSpeaker();
-            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName() ?? '', $speaker->getLastName() ?? '') : 'None';
+            $speaker_name = $speaker ? sprintf("%s %s", $speaker->getFirstName(true) ?? '', $speaker->getLastName(true) ?? '') : 'None';
             $speaker_name = trim($speaker_name) ?: 'None';
             $id = $subject->getId() ?? 'unknown';
 

diff --git a/app/Jobs/Emails/PresentationSubmissions/ImportEventSpeakerEmail.php b/app/Jobs/Emails/PresentationSubmissions/ImportEventSpeakerEmail.php
@@ -80,7 +80,7 @@ public function __construct(Presentation $presentation, PresentationSpeaker $spe
         }
         $payload[IMailTemplatesConstants::reset_password_link] = sprintf("%s/auth/password/reset", $idp_base_url);
         $payload[IMailTemplatesConstants::support_email] = $support_email;
-        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName(' ');
+        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName(true);
         if(empty($payload[IMailTemplatesConstants::speaker_full_name])){
             $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getEmail();
         }

diff --git a/app/Jobs/Emails/PresentationSubmissions/PresentationModeratorNotificationEmail.php b/app/Jobs/Emails/PresentationSubmissions/PresentationModeratorNotificationEmail.php
@@ -64,7 +64,7 @@ public function __construct(PresentationSpeaker $moderator, Presentation $presen
 
         $payload = [];
 
-        $payload[IMailTemplatesConstants::speaker_full_name] = $moderator->getFullName(" ");
+        $payload[IMailTemplatesConstants::speaker_full_name] = $moderator->getFullName(true);
         $payload[IMailTemplatesConstants::speaker_email] = $moderator->getEmail();
         $payload[IMailTemplatesConstants::creator_full_name] = $creator->getFullName();
         $payload[IMailTemplatesConstants::creator_email] = $creator->getEmail();

diff --git a/app/Jobs/Emails/PresentationSubmissions/PresentationSpeakerNotificationEmail.php b/app/Jobs/Emails/PresentationSubmissions/PresentationSpeakerNotificationEmail.php
@@ -66,7 +66,7 @@ public function __construct(PresentationSpeaker $speaker, Presentation $presenta
 
         $payload = [];
 
-        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName(" ");
+        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName(true);
         $payload[IMailTemplatesConstants::speaker_email] = $speaker->getEmail();
         $payload[IMailTemplatesConstants::creator_full_name] = $creator->getFullName();
         $payload[IMailTemplatesConstants::creator_email] = $creator->getEmail();

diff --git a/...ils/PresentationSubmissions/SelectionProcess/PresentationSpeakerSelectionProcessEmail.php b/...ils/PresentationSubmissions/SelectionProcess/PresentationSpeakerSelectionProcessEmail.php
@@ -130,7 +130,11 @@ public function __construct
         }
 
         $speaker_email = $speaker->getEmail();
-        $speaker_full_name = $speaker->getFullName();
+        // The Member name fallback may bypass the account visibility toggle only when the delivery
+        // is self-addressed. With submitter copies on, this same payload is CC'd to the creators of
+        // the speaker's presentations - non-admin third parties - so the fallback must honor the
+        // toggle (policy/profile-data-handling.md Rule 9) and the greeting falls back to the email.
+        $speaker_full_name = $speaker->getFullName(count($cc_email) === 0);
 
         // set to email if fullname is empty
         if(empty($speaker_full_name)){

diff --git a/...s/PresentationSubmissions/SelectionProcess/PresentationSubmitterSelectionProcessEmail.php b/...s/PresentationSubmissions/SelectionProcess/PresentationSubmitterSelectionProcessEmail.php
@@ -75,7 +75,7 @@ public function __construct
         if(empty($submitter_full_name)){
             // check if we have a first and last name at speaker level
             if($submitter->hasSpeaker()){
-                $submitter_full_name = $submitter->getSpeaker()->getFullName();
+                $submitter_full_name = $submitter->getSpeaker()->getFullName(true);
             }
             if(empty($submitter_full_name)) {
                 // fallback to email

diff --git a/app/Jobs/Emails/PresentationSubmissions/SpeakerCreationEmail.php b/app/Jobs/Emails/PresentationSubmissions/SpeakerCreationEmail.php
@@ -52,7 +52,7 @@ public function __construct(PresentationSpeaker $speaker)
             throw new \InvalidArgumentException('cfp.support_email is null.');
 
         $payload = [];
-        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName();
+        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName(true);
         $payload[IMailTemplatesConstants::speaker_email] = $speaker->getEmail();
         $payload[IMailTemplatesConstants::speaker_management_link] = $speaker_management_base_url;
         $bio_edit_link = sprintf("%s/app/profile", $speaker_management_base_url);

diff --git a/app/Jobs/Emails/PresentationSubmissions/SpeakerEditPermissionApprovedEmail.php b/app/Jobs/Emails/PresentationSubmissions/SpeakerEditPermissionApprovedEmail.php
@@ -41,6 +41,9 @@ public function __construct(SpeakerEditPermissionRequest $request)
     {
         $payload = [];
         $payload[IMailTemplatesConstants::requested_by_full_name] = $request->getRequestedBy()->getFullName();
+        // the recipient is the requester (a non-admin third party), so the speaker's Member name
+        // fallback must honor the account visibility toggle (policy/profile-data-handling.md
+        // Rule 9). Deliberately NOT passing override_permission.
         $payload[IMailTemplatesConstants::speaker_full_name] = $request->getSpeaker()->getFullName();
         $payload[IMailTemplatesConstants::speaker_management_link] = EmailUtils::getSpeakerManagementLink();
         $payload[IMailTemplatesConstants::tenant_name] = Config::get("app.tenant_name");

diff --git a/app/Jobs/Emails/PresentationSubmissions/SpeakerEditPermissionRejectedEmail.php b/app/Jobs/Emails/PresentationSubmissions/SpeakerEditPermissionRejectedEmail.php
@@ -41,6 +41,9 @@ public function __construct(SpeakerEditPermissionRequest $request)
     {
         $payload = [];
         $payload[IMailTemplatesConstants::requested_by_full_name] = $request->getRequestedBy()->getFullName();
+        // the recipient is the requester (a non-admin third party), so the speaker's Member name
+        // fallback must honor the account visibility toggle (policy/profile-data-handling.md
+        // Rule 9). Deliberately NOT passing override_permission.
         $payload[IMailTemplatesConstants::speaker_full_name] = $request->getSpeaker()->getFullName();
         $payload[IMailTemplatesConstants::speaker_management_link] = EmailUtils::getSpeakerManagementLink();
         $payload[IMailTemplatesConstants::tenant_name] = Config::get("app.tenant_name");

diff --git a/app/Jobs/Emails/PresentationSubmissions/SpeakerEditPermissionRequestedEmail.php b/app/Jobs/Emails/PresentationSubmissions/SpeakerEditPermissionRequestedEmail.php
@@ -40,7 +40,9 @@ public function __construct(SpeakerEditPermissionRequest $request, string $token
     {
         $payload = [];
         $payload[IMailTemplatesConstants::requested_by_full_name] = $request->getRequestedBy()->getFullName();
-        $payload[IMailTemplatesConstants::speaker_full_name] = $request->getSpeaker()->getFullName();
+        // self-addressed: the recipient is the speaker, so the Member name fallback bypasses the
+        // account visibility toggle (policy/profile-data-handling.md Rule 9 scope)
+        $payload[IMailTemplatesConstants::speaker_full_name] = $request->getSpeaker()->getFullName(true);
         $payload[IMailTemplatesConstants::token] = $token;
         $payload[IMailTemplatesConstants::link] = $request->getConfirmationLink($request->getSpeaker()->getId(), $token);
         $payload[IMailTemplatesConstants::tenant_name] = Config::get("app.tenant_name");

diff --git a/app/Jobs/Emails/Schedule/PresentationActivitySpeakerChangeEmail.php b/app/Jobs/Emails/Schedule/PresentationActivitySpeakerChangeEmail.php
@@ -63,7 +63,7 @@ public function __construct(Presentation $presentation, PresentationSpeaker $spe
         $summit = $presentation->getSummit();
 
         $payload = [];
-        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName(" ");
+        $payload[IMailTemplatesConstants::speaker_full_name] = $speaker->getFullName(true);
         $payload[IMailTemplatesConstants::speaker_email] = $speaker->getEmail();
         $payload[IMailTemplatesConstants::presentation_title] = $presentation->getTitle();
         $payload[IMailTemplatesConstants::presentation_id] = $presentation->getId();

diff --git a/app/ModelSerializers/Summit/AdminSummitSchedulePreFilterElementConfigSerializer.php b/app/ModelSerializers/Summit/AdminSummitSchedulePreFilterElementConfigSerializer.php
@@ -77,8 +77,8 @@ public function serialize($expand = null, array $fields = [], array $relations =
                                     if(is_null($speaker)) continue;
                                     $res[] = [
                                         'id' => $speaker->getId(),
-                                        'first_name' => $speaker->getFirstName(),
-                                        'last_name' => $speaker->getLastName(),
+                                        'first_name' => $speaker->getFirstName(true),
+                                        'last_name' => $speaker->getLastName(true),
                                         'email' => $speaker->getEmail(),
                                     ];
                                 }

diff --git a/app/ModelSerializers/Summit/Presentation/AdminPresentationCSVSerializer.php b/app/ModelSerializers/Summit/Presentation/AdminPresentationCSVSerializer.php
@@ -88,7 +88,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
             if(in_array("moderator_id",$fields))
                 $values['moderator_id'] = $presentation->getModerator()->getId();
             if(in_array("moderator_full_name",$fields))
-                $values['moderator_full_name'] = $presentation->getModerator()->getFullName();
+                $values['moderator_full_name'] = $presentation->getModerator()->getFullName(true);
             if(in_array("moderator_email",$fields))
                 $values['moderator_email'] = $presentation->getModerator()->getEmail();
             if(in_array("moderator_title",$fields))
@@ -122,7 +122,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
 
             foreach ($presentation->getSpeakers() as $speaker) {
                 $speaker_ids[] = $speaker->getId();
-                $speaker_fullnames[] = $speaker->getFullName();
+                $speaker_fullnames[] = $speaker->getFullName(true);
                 $speaker_emails[] = $speaker->getEmail();
                 $speaker_titles[] = trim($speaker->getTitle());
                 $speaker_companies[] = trim($speaker->getCompany());
@@ -164,7 +164,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
                 if(in_array("submitter_id",$fields))
                     $values['submitter_id'] = $submitter->getId();
                 if(in_array("submitter_full_name",$fields))
-                    $values['submitter_full_name'] = $submitter->getFullName();
+                    $values['submitter_full_name'] = $submitter->getFullName(true);
                 if(in_array("submitter_email",$fields))
                     $values['submitter_email'] = $submitter->getEmail();
                 if(in_array("submitter_title",$fields))

diff --git a/app/ModelSerializers/Summit/Presentation/SpeakerPresentationEmailSerializer.php b/app/ModelSerializers/Summit/Presentation/SpeakerPresentationEmailSerializer.php
@@ -56,6 +56,11 @@ public function serialize($expand = null, array $fields = [], array $relations =
             ];
         }
 
+        // Co-speaker / moderator names below are rendered to non-admin recipients (the submitter
+        // and the other speakers of this presentation), so the Member name fallback must honor the
+        // account visibility toggle here (policy/profile-data-handling.md Rule 9), exactly as the
+        // CFP portal's public serializer does for the same speaker (Rule 5). Deliberately NOT
+        // passing override_permission to getFullName().
         $speakers = [];
         foreach ($presentation->getSpeakers() as $speaker){
             $speakers[] = [

diff --git a/app/ModelSerializers/Summit/Presentation/TrackChairPresentationCSVSerializer.php b/app/ModelSerializers/Summit/Presentation/TrackChairPresentationCSVSerializer.php
@@ -95,7 +95,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
 
         if ($presentation->hasModerator()) {
             $values['moderator_id'] = $presentation->getModerator()->getId();
-            $values['moderator_full_name'] = $presentation->getModerator()->getFullName();
+            $values['moderator_full_name'] = $presentation->getModerator()->getFullName(true);
             $values['moderator_email'] = $presentation->getModerator()->getEmail();
             $values['moderator_title'] = trim($presentation->getModerator()->getTitle());
             $values['moderator_company'] = trim($presentation->getModerator()->getCompany());
@@ -119,7 +119,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
 
             foreach ($presentation->getSpeakers() as $speaker) {
                 $speaker_ids[] = $speaker->getId();
-                $speaker_fullnames[] = $speaker->getFullName();
+                $speaker_fullnames[] = $speaker->getFullName(true);
                 $speaker_emails[] = $speaker->getEmail();
                 $speaker_titles[] = trim($speaker->getTitle());
                 $speaker_companies[] = trim($speaker->getCompany());
@@ -145,7 +145,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
             if ($creator->hasSpeaker()) {
                 $submitter = $creator->getSpeaker();
                 $values['submitter_id'] = $submitter->getId();
-                $values['submitter_full_name'] = $submitter->getFullName();
+                $values['submitter_full_name'] = $submitter->getFullName(true);
                 $values['submitter_email'] = $submitter->getEmail();
                 $values['submitter_title'] = $submitter->getTitle();
                 $values['submitter_company'] = $submitter->getCompany();

diff --git a/...lizers/Summit/Registration/PromoCodes/SpeakerSummitRegistrationDiscountCodeSerializer.php b/...lizers/Summit/Registration/PromoCodes/SpeakerSummitRegistrationDiscountCodeSerializer.php
@@ -12,6 +12,7 @@
  * limitations under the License.
  **/
 
+use App\ModelSerializers\Traits\AccountVisibilityToggleBypass;
 use Libs\ModelSerializers\AbstractSerializer;
 use models\summit\SpeakerSummitRegistrationDiscountCode;
 /**
@@ -21,6 +22,8 @@
 class SpeakerSummitRegistrationDiscountCodeSerializer
     extends SummitRegistrationDiscountCodeSerializer
 {
+    use AccountVisibilityToggleBypass;
+
     protected static $array_mappings = [
         'Type'      => 'type:json_string',
         'SpeakerId' => 'speaker_id:json_int',
@@ -64,7 +67,11 @@ public function serialize($expand = null, array $fields = [], array $relations =
                         break;
                     case 'owner_name': {
                         if($code->hasSpeaker()){
-                            $values['owner_name'] = $code->getSpeaker()->getFullName();
+                            // admin tooling or the owner themself may bypass the account
+                            // visibility toggle on the Member name fallback; anyone else who
+                            // reaches this serializer indirectly must not (policy Rule 9)
+                            $speaker = $code->getSpeaker();
+                            $values['owner_name'] = $speaker->getFullName($this->canBypassAccountVisibilityToggle($speaker));
                         }
                     }
                         break;

diff --git a/...rializers/Summit/Registration/PromoCodes/SpeakerSummitRegistrationPromoCodeSerializer.php b/...rializers/Summit/Registration/PromoCodes/SpeakerSummitRegistrationPromoCodeSerializer.php
@@ -12,6 +12,7 @@
  * limitations under the License.
  **/
 
+use App\ModelSerializers\Traits\AccountVisibilityToggleBypass;
 use Libs\ModelSerializers\AbstractSerializer;
 use models\summit\SpeakerSummitRegistrationPromoCode;
 /**
@@ -21,6 +22,8 @@
 class SpeakerSummitRegistrationPromoCodeSerializer
     extends SummitRegistrationPromoCodeSerializer
 {
+    use AccountVisibilityToggleBypass;
+
     protected static $array_mappings = [
         'Type'      => 'type:json_string',
         'SpeakerId' => 'speaker_id:json_int',
@@ -64,7 +67,11 @@ public function serialize($expand = null, array $fields = [], array $relations =
                         break;
                     case 'owner_name': {
                         if($code->hasSpeaker()){
-                            $values['owner_name'] = $code->getSpeaker()->getFullName();
+                            // admin tooling or the owner themself may bypass the account
+                            // visibility toggle on the Member name fallback; anyone else who
+                            // reaches this serializer indirectly must not (policy Rule 9)
+                            $speaker = $code->getSpeaker();
+                            $values['owner_name'] = $speaker->getFullName($this->canBypassAccountVisibilityToggle($speaker));
                         }
                     }
                         break;

diff --git a/...ializers/Summit/Registration/PromoCodes/SpeakersRegistrationDiscountCodeCSVSerializer.php b/...ializers/Summit/Registration/PromoCodes/SpeakersRegistrationDiscountCodeCSVSerializer.php
@@ -44,7 +44,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
         $owner_name = [];
         $owner_email = [];
         foreach($code->getOwners() as $owner){
-            $owner_name[] = $owner->getSpeaker()->getFullName();
+            $owner_name[] = $owner->getSpeaker()->getFullName(true);
             $owner_email[] = $owner->getSpeaker()->getEmail();
 
         }

diff --git a/...izers/Summit/Registration/PromoCodes/SpeakersSummitRegistrationPromoCodeCSVSerializer.php b/...izers/Summit/Registration/PromoCodes/SpeakersSummitRegistrationPromoCodeCSVSerializer.php
@@ -43,7 +43,7 @@ public function serialize($expand = null, array $fields = [], array $relations =
         $owner_name = [];
         $owner_email = [];
         foreach($code->getOwners() as $owner){
-            $owner_name[] = $owner->getSpeaker()->getFullName();
+            $owner_name[] = $owner->getSpeaker()->getFullName(true);
             $owner_email[] = $owner->getSpeaker()->getEmail();
 
         }