Under what circumstances, exactly, does an admin or system account trigger the “check personal message” log entry? We have found that it doesn’t only happen when an admin actually checks another user’s PMs. It also seems to happen any time a thread is split into a PM for reasons like derailment or inflammatory posts. Under what other circumstances will this “check personal message” log entry be recorded? We need to nail this down because there has been a lot of tension surrounding this particular log entry type on my forum.

[image] longhairedboy: Under what other circumstances will this “check personal message” log entry be recorded? It believe it should be logged any time the content of a PM is visible to an admin that isn’t included on the PM… is that right @techAPJ?

Is that why sometimes we occasionally see service accounts like ‘system’ in the log as having read a personal message? Possibly when they do cleanup of some kind?

When an admin converts a topic into a private message, their browser automatically loads the PM immediately after the operation succeeds. The participants in the private message should check the timestamp of the staff action log (which I presume you’re giving to them) to see exactly which posts were visible to the admin, which in this case should be exactly the posts that were previously public.

[image] longhairedboy: Is that why sometimes we occasionally see service accounts like ‘system’ in the log as having read a personal message? Possibly when they do cleanup of some kind? That’s weird - I can confirm this happening on meta. This is coming from webhooks that fire when the first post of a topic is destroyed. The log is created before the webhook existence check happens, so it occurs even if no webhooks receive the topic content. cc @vinothkannans - this was FIX: Generate webhook payloads before destroy events (#6325) · discourse/discourse@8430ea9 · GitHub, can you think of fixes for this? TopicView.new() is what’s creating the PM viewing action.

This commit will resolve the issue https://github.com/discourse/discourse/commit/3b55de90e517f7081006947cc4fabbe5651a65c0

[image] awesomerobot: It believe it should be logged any time the content of a PM is visible to an admin that isn’t included on the PM… is that right @techAPJ? That sounds correct to me.

When does it log "check personal message"?

Product Support

techAPJ (Arpit Jalan) September 9, 2020, 5:04am 7

That sounds correct to me.

Topic		Replies	Views
PMs are accesible by admins if the admin has the link Feature	12	1853	December 2, 2021
Admins can still read anyone's PM's by downloading the database Feature privacy	19	6050	March 26, 2015
Admin Private Messages Views Product Support	1	452	July 1, 2022
Privacy plugin that makes it more difficult for admins to read PMs Feature personal-messages	55	7712	February 6, 2018
Can Admins see all Deleted PMs? Product Support	8	2087	January 31, 2018

When does it log "check personal message"?

Related topics