A discussion about adding approval controls for destructive actions in the platform has started. AstonJ suggested assigning a specific admin as the ‘owner’ or approver for actions like tag deletion, user account deletion, and mass topic deletion, after a tag went missing without being logged. However, erlend_sh proposed that logging destructive actions should be the first step, as implementing approval controls could be complicated, especially for different tiers of admin rights. codinghorror pointed out that staff members should receive a warning dialog before deleting a tag, which would remove it from associated topics. david confirmed this warning dialog exists, sharing a screenshot as evidence.
One of our tags went missing a little while back, and since tag deletion is not logged (is it?) I was not able to find out what happened to it.
Would it be possible to put a specific admin user as the ‘owner’ or approver of things like tags or other destructive actions? So things could be put into a queue or a temporary state of ‘delete’ until approved by that admin?
Some items which I think may need such approval:
Deletion of Tags
Deletion of or anonymising (or similar) of user accounts
Deletion of categories
Mass deletion of Topics
etc
Either that, or have a roll back feature for destructive actions that could happen by accident?
I’d say this should be Step 0 here. Extra approval controls is really complicated, and the way I see it we could only restrict Moderators anyhow. Getting into different tiers of admin rights would be super complicated. I would strive for easier roll-backs before getting into granular approval controls.
