Un utilisateur réduit au silence peut contourner cette restriction en entrant en mode anonyme

ted · Avril 23, 2025, 8:39

Bonjour !

Nous venons de fusionner un correctif qui fait que, en mode anonyme, le statut « silencieux » du compte propriétaire est respecté ici :

github.com/discourse/discourse

FIX: Delegate silenced_till from anonymous user to main user account

main ← fix/anonymous-silenced-users

opened 06:40AM - 23 Apr 25 UTC

Drenmi

+24 -0

### What is the problem? When a user is silenced they can, given they have th…e permissions, enter anonymous mode and keep posting, essentially bypassing the silence that way. ### How does this fix it? This change delegates the `silenced_till` attribute to the main user record if the user is anonymous. ### Trade-offs and alternative approaches Given anonymous posting is enabled, as of this change, each call to `silenced_till` will produce a minimal query to `anonymous_users` to select one record based on pkey. The alternative to this is to add logic to update the anonymous record's value when it is created and when a user is silenced or unsilenced. Given this choice of a theoretical minimal performance impact on a lukewarm path and a significantly more involved implementation, I chose the former.

Sujet		Réponses	Vues
Anonymous mode not working Bug anonymous-mode	7	729	Août 9, 2020
Enable and configure anonymous mode Site Management how-to , anonymous-mode	0	7976	Juin 23, 2020
Anonymous posting not available even when enabled Support anonymous-mode	7	2752	Juin 23, 2020
Anonymous posting -- but retaining original user permissions Feature anonymous-mode	11	1822	Décembre 2, 2021
Anonymous posting for sensitive subjects Feature anonymous-mode	16	1980	Juin 13, 2020

Un utilisateur réduit au silence peut contourner cette restriction en entrant en mode anonyme

Sujets connexes