Here are the steps that happened in sequence that led me to discover this issue: A user in a group forwarded an email to a private category (whose access is controlled by that group) from someone who is not on our discourse. Because I have the “forwarded emails behaviour” setting set to “create replies”, a new topic was created automatically with OP by a new staged user (also created automatically) and a response post by the group member, both from the single email that the member sent. Above steps are as expected, but this step is not: the staged user was sent a “user_replied” type email automatically with the contents of the reply post on the topic! This results in leak of information. The staged user is not a member of the group and hence should not be sent emails from anything in the private category (even though they are owner of the topic/OP).

I think this is covered in the settings under your group at manage/interaction: Posting Who can @mention this group? Who can message this group? The workflow you described is intentional, and likely used more widely; we use it as a group inbox/support channel, which requires staged users (non-forum folks, like customers) to be able to email in to a private group used by internal support people. If I were you I’d look at the forwarded emails behaviour setting. You maybe want “quote” or “hide”, depending on what your group is for. :slight_smile:

I don’t think the group settings are a factor here. The email is created as a PM and the email settings have expanded the audience of the message to the group PLUS the staged user. As the user is part of the PM audience they will receive emails related to that PM topic. Groups are just one type of recipient for a private message. They aren’t a container or a boundary for it’s distribution.

Oh I notice a confusion here, which is my fault. This is not a group PM. This was in a topic created in a category that only a particular group members can access. Let me update the op as well.

Staged users don’t need permission to access a category, they will always have access to topics that they are staged into. If you forward an email into a category and the above settings are enabled they will behave like staged users within that topic. This is how many discourse-based support communities work. They rely on this feature. It’s working as intended, no information leaked you just weren’t aware of the implications of these settings.

If you delete the user you can anonymize their posts but that doesn’t stop a recurrence. You can solve for the future by disabling the email parsing, disabling staged users, or educating your users not to do this unless they intend on the above outcome.

User staged into topic received notifications of responses to that topic

Product Support

k4rtik (Kartik) March 13, 2020, 6:11pm 6

Ah. Assuming all of this is intended, how do I now make sure that the staged user does not receive emails for further replies in that topic?

Do I need to delete the user?

Topic		Replies	Views
Staged users can't reply to their own topics Bug	15	3447	June 26, 2016
Reassure me that staged users don't get email summaries or mention notifications Product Support	6	2251	September 8, 2017
Avoid staged users to receive notifications Product Support	8	574	October 14, 2022
Staged users not receiving user_replied email notifications Product Support	2	342	October 25, 2023
Send email to non registered user in a group Feature	20	3815	April 16, 2021

User staged into topic received notifications of responses to that topic

Related topics