Fix permissions for email address visibility

Now email addresses of users will only be shown if the owner
either consents, or if the user is able to edit email addresses
of other users.