When checking someone’s email, IP[1], or other sensitive info, you should be required to enter your password so you don’t accidentally check anything.
AI-generated summary
In a discussion titled “Email/IP checks require password” under the Feature category and tagged with review-queue, ct-337 proposes requiring admins to enter their password before viewing sensitive user data like email or IP addresses to prevent accidental access. mcdanlj strongly opposes this, arguing it would slow down spam review workflows—already time-consuming—and suggests such a feature should be optional via a plugin. Jagster adds that email and IP are not particularly sensitive. ct-337 counters that on sites with immature users, such data can be sensitive, and notes blocking can still occur without password entry. mcdanlj reiterates that nuanced spam detection requires quick access and that imposing this universally is unreasonable, again advocating for plugin-based opt-in. tobiaseigen references a related request for warnings when viewing personal messages and suggests a similar warning mechanism might be appropriate here instead of mandatory password entry. The core tension is between security/accident prevention and operational efficiency for moderators.
Please no. Making the process of reviewing likely spammers take even more time would be terrible. Spammers already waste so many hours of my life I’ll never get back.
If you really want to have to enter your password, create a plugin for it.
3 Likes
Plus email and IP isn’t that sensitive information anyway.
1 Like
you can still block their email and ip without entering a password
on websites with a bunch of immature teens, that info is
You don’t understand my needs here. There are patterns I’m looking for to distinguish likely spammers in nuanced cases.
Asking that every Discourse admin be saddled with this is a huge imposition on others’ time and effort. I am recording here for the record that I am opposed to making this universal.
This is why Discourse has an extensive plug-in ecosystem. You don’t need to impose your ask for additional effort on everyone else.
3 Likes
We have a request for Add a warning when checking personal messages from a user public profile, as an admin. Maybe something similar can be done here?
2 Likes