The attribute specified will be mapped to the "To" field on the email form and will be used to check if the user has permission ...