Email notification when adding/removing email address.

[ewdurbin]

We should notify all email addresses on an account when an email address is added/removed..

We currently only notify for primary email changes. It's probably worth letting the Primary Email address know what's going on.

[waseem18]

We should also probably have a Manage Notifications page as this can generate sizable email traffic - considering similar Email feature #997

[di]

I'm on the fence about this. A user can't do anything with an added email address until it's made primary, so anyone who's account is compromised will likely receive both notifications anyways.

Like @waseem18 said, for uncompromised users, the action of just setting a new primary email address would generate a lot of emails.

[brainwane]

We still need to make a policy decision about this. But if we decide to do this, then to do this the right way, we should wait till we have #5863 implemented, so we can draw on the event logging and use it to trigger this notification.

[brainwane]

Now unblocked, but we do need to discuss approach - @woodruffw ?

[woodruffw]

Thanks for the ping!

I believe that either @ewdurbin or @dstufft mentioned that SQLAlchemy has a notion of triggers/events -- one potential approach would be to leverage those on creation of the relevant email event logs, and then dispatch emails from there.