added username (models.CharField) & searchable (models.BooleanField) to User model in lyric app; new ITs confirm functionality here; dashboard views now ensure that sharing a list w. an email address (as opposed to a username) neither confirms nor denies whether that email address has a registered account (ITs green)

src/apps/dashboard/tests/integrated/test_views.py

@@ -1,6 +1,7 @@
 import lxml.html
 
-from django.test import TestCase
+from django.contrib.messages import get_messages
+from django.test import override_settings, TestCase
 from django.urls import reverse
 from django.utils import html
 
@@ -219,6 +220,20 @@ class ShareListTest(TestCase):
                          data={"recipient": "owner@example.com"})
         self.assertNotIn(owner, our_list.shared_with.all())
 
+    @override_settings(MESSAGE_STORAGE='django.contrib.messages.storage.session.SessionStorage')
+    def test_share_list_shows_privacy_safe_message(self):
+        our_list = List.objects.create()
+        response = self.client.post(
+            f"/dashboard/list/{our_list.id}/share_list",
+            data={"recipient": "nobody@example.com"},
+            follow=True,
+        )
+        messages = list(get_messages(response.wsgi_request))
+        self.assertEqual(
+            str(messages[0]),
+            "An invite has been sent if that address is registered.",
+        )
+
 class ViewAuthListTest(TestCase):
     def setUp(self):
         self.owner = User.objects.create(email="disco@example.com")

src/apps/dashboard/views.py

@@ -1,3 +1,4 @@
+from django.contrib import messages
 from django.http import HttpResponseForbidden
 from django.shortcuts import redirect, render
 
@@ -56,4 +57,5 @@ def share_list(request, list_id):
         our_list.shared_with.add(recipient)
     except User.DoesNotExist:
         pass
+    messages.success(request, "An invite has been sent if that address is registered.")
     return redirect(our_list)