This is… insane. In any forum, moderators can see the emails of users and even less the possibility of exporting them and downloading them to a csv file. This is a huge security hole. While promoting someone as a moderator means that you have confidence in that person, but it is crazy to think tha…

Viewing emails is logged and requires a click on a button to display. Similarly export is logged. If you don’t trust your moderators, demote them to trust level 4 users.

[画像] codinghorror: Viewing emails is logged and requires a click on a button to display. Similarly export is logged. If you don’t trust your moderators, demote them to trust level 4 users. That worked, thanks. It is not a question of trust, it is that a moderator should not have those privi…

Yep, turns out, nobody can be trusted. Including yourself.

Moderators need to investigate possible spammers, duplicate accounts, forgot my login/password, etc. Checking email addresses is important for many of those tasks.

There seem to be varying definitions of moderators. As far as I know: In Discourse, trust level 4 is what most people call moderators. They moderate the discussion in the forum. What Discourse calls moderators are people, who have nearly administator rights. They are staff of the forum. They have …

[画像] codinghorror: Viewing emails is logged and requires a click on a button to display. Similarly export is logged. I can see where email inspection is logged.. but for the life of me I can’t seem to find where exports are logged. Wouldn’t it make sense to be under Logs > Staff Actions? […

While I can’t find an evidence trail in logs, I have found a work around. [Profile_-system-_Lucee_Dev] As System sends an export email, you can locate the user and review the Sent archive for Data export complete. Hope that helps someone :wink:

[画像] codinghorror: Similarly export is logged. Are you sure? If so, when is the log action supposed to occur: when the export is requested or when the file is actually downloaded? I’m asking because we have a log of a moderator deleting a PM entitled “user-list-data-export-complete” and that…

You’re right, we don’t log user list export from Admin, Users, Export. I just tested this myself and I see nothing in Staff Action Logs. :frowning: Can you add this to your high priority list @vinothkannans ?

Moderators can view emails and export user lists

Product Support

vinothkannans (Vinoth Kannan) 2018 年 9 月 18 日午後 10:01 14

It’s done as per below commit. Currently it’s logging when the download is requested.

https://github.com/discourse/discourse/commit/9281b72308c7844396d41d67d61305b93d148236

トピック		返信	表示
Disable users list export? Product Support	3	612	2018 年 9 月 27 日
Moderators Viewing Email Addresses Feature	4	2055	2017 年 7 月 25 日
Remove moderator ability to view users email addresses Feature	27	6833	2015 年 6 月 28 日
Email security/obscurity for moderators is inconsistent Bug	14	3145	2015 年 9 月 29 日
Hiding User Emails from moderators Feature	1	1500	2018 年 1 月 25 日

Moderators can view emails and export user lists

関連トピック