Gedownloade gebruiker kan het omzeilen door anonieme modus te gebruiken

ted · 23 april 2025 om 08:39

Hello!

We just merged a fix that makes it so that while in anonymous mode, the owner account’s “silenced” status is respected here:

github.com/discourse/discourse

FIX: Delegate silenced_till from anonymous user to main user account

main ← fix/anonymous-silenced-users

merged 08:34AM - 23 Apr 25 UTC

Drenmi

+24 -0

### What is the problem? When a user is silenced they can, given they have th…e permissions, enter anonymous mode and keep posting, essentially bypassing the silence that way. ### How does this fix it? This change delegates the `silenced_till` attribute to the main user record if the user is anonymous. ### Trade-offs and alternative approaches Given anonymous posting is enabled, as of this change, each call to `silenced_till` will produce a minimal query to `anonymous_users` to select one record based on pkey. The alternative to this is to add logic to update the anonymous record's value when it is created and when a user is silenced or unsilenced. Given this choice of a theoretical minimal performance impact on a lukewarm path and a significantly more involved implementation, I chose the former.

Topic		Antwoorden	Weergaven
Anonymous mode not working Bug anonymous-mode	7	729	9 augustus 2020
Enable and configure anonymous mode Site Management how-to , anonymous-mode	0	7982	23 juni 2020
Anonymous posting not available even when enabled Support anonymous-mode	7	2753	23 juni 2020
Anonymous posting -- but retaining original user permissions Feature anonymous-mode	11	1822	2 december 2021
Anonymous posting for sensitive subjects Feature anonymous-mode	16	1982	13 juni 2020

Gedownloade gebruiker kan het omzeilen door anonieme modus te gebruiken

Gerelateerde topics