# גרסה 3.4.0.beta3: הגבלת זמינות הפרופיל למשתמשים ברמת אמון נמוכה

**URL:** https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524
**Category:** Feature
**Created:** [27 בדצמבר,‏ 2024,‏ 9:14am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524 "2024-12-27T09:14:53Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Robin.Grant](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/robin.grant/32/308261_2.png) [@Robin.Grant](https://meta.discourse.org/u/Robin.Grant)
#### Post date: [27 בדצמבר,‏ 2024,‏ 9:14am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/1 "2024-12-27T09:14:53Z")

</div>

> [@3.4.0.beta3: Check for updates on What’s New page, filter by user in the review queue, threading in Chat DMs and group chats, and more](https://meta.discourse.org/t/3-4-0-beta3-check-for-updates-on-what-s-new-page-filter-by-user-in-the-review-queue-threading-in-chat-dms-and-group-chats-and-more/343237/1):
>
> ### Restricting profile visibility of low Trust level users
> 
> We have introduced the following changes for low Trust level (TL) users to prevent abuse of user profile bios and other fields.
> 
> - Anonymous, TL0 and TL1 users cannot see any user profiles for users with 0 posts except for staff users
> - Anonymous and TL0 users can only see profiles of TL1 users and above

Hi - is there any way of turning this ‘feature’ off? We have a very low-volume private community (where all new users are pre-vetted before being invited to the community), so this change is extremely detrimental to us.

---

<div class="post-metadata">

### Author: ![MihirR](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mihirr/32/475158_2.png) [@MihirR](https://meta.discourse.org/u/MihirR)
#### Post date: [27 בדצמבר,‏ 2024,‏ 2:45pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/2 "2024-12-27T14:45:10Z")

</div>

Hey, in the admin settings I guess there is an option to disable the same, you can go to All site settings and search for hide user and uncheck the boxes 🙂

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [27 בדצמבר,‏ 2024,‏ 3:46pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/3 "2024-12-27T15:46:41Z")

</div>

You can also raise the trust level of new members to TL1.

---

<div class="post-metadata">

### Author: ![Robin.Grant](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/robin.grant/32/308261_2.png) [@Robin.Grant](https://meta.discourse.org/u/Robin.Grant)
#### Post date: [27 בדצמבר,‏ 2024,‏ 4:35pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/4 "2024-12-27T16:35:43Z")

</div>

> [@MihirR](#):
>
> Hey, in the admin settings I guess there is an option to disable the same, you can go to All site settings and search for hide user and uncheck the boxes 🙂

Hey @MihirR - I don’t think there is - not that I can find anyway!

> [@tobiaseigen](#):
>
> You can also raise the trust level of new members to TL1.

Hey @tobiaseigen - that wouldn’t really solve the problem of “TL1 users cannot see any user profiles for users with 0 posts except for staff users” - they still wouldn’t be able to see the profiles of other users who haven’t posted yet.

Also, we wouldn’t want to lose one of the 4 trust layers, which obviously have a lot of uses.

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [27 בדצמבר,‏ 2024,‏ 4:44pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/5 "2024-12-27T16:44:16Z")

</div>

Thanks, Robin! Can you explain your use case a little more so we can understand it better? How many of your members have never posted? Will they ever post? Why would you have members in your community who never contribute?

Is your site invite only and private?

---

<div class="post-metadata">

### Author: ![Robin.Grant](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/robin.grant/32/308261_2.png) [@Robin.Grant](https://meta.discourse.org/u/Robin.Grant)
#### Post date: [27 בדצמבר,‏ 2024,‏ 5:00pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/6 "2024-12-27T17:00:54Z")

</div>

Hey @tobiaseigen, I imagine it’s a fairly common use case - connecting a community of practitioners to share knowledge - obviously only a small percentage of whom contribute on a regular basis, and some may join the community and take months before they first need to ask a question (or decide to answer someone else’s), or indeed may never post at all.

Even if they never post, there’s still value for them in reading what’s being shared in the community, and there’s still value for other members to browse the user directory and see them there and view their profiles (and to be able to PM them).

From a community perspective, it’s important that everyone sees that, although there are relatively few posts/contributors, that actually the vast majority of practitioners out there are members of the community - i.e. this is the place to share knowledge as the right people will see you sharing it.

The community is invite-only - in fact, I’m the only person who can invite people (although people can send me a request to be invited, and I’ll then vet them to make sure they are a practitioner) - and it’s private and not viewable on the public web or visible to search engines.

We insist that everyone uses their real full name in the community and the organisation they represent is also shown on their profile (and I will add/change this manually after sign-up if necessary, as I already have this information for each invited user, along with their org’s website URL etc).

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [28 בדצמבר,‏ 2024,‏ 1:12am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/7 "2024-12-28T01:12:44Z")

</div>

Hi Robin, one possible solution if you use Invites.

Create a user group say “Practitioners” you can also add members manually when needed. Have the group setup to bump Trust level to 2 or 3.

Automation plugin included in core can also likely use a script based on a user Feild to bump to or add to group.

May still need to check with team to see if TL2+ is not affected by viewing user list. However if the group allows members to view members of the group this might work as a workaround to the site setting(would need to be tested)

---

<div class="post-metadata">

### Author: ![Robin.Grant](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/robin.grant/32/308261_2.png) [@Robin.Grant](https://meta.discourse.org/u/Robin.Grant)
#### Post date: [28 בדצמבר,‏ 2024,‏ 1:34am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/8 "2024-12-28T01:34:09Z")

</div>

@Heliosurge - I’d rather have a solution that involved an admin setting that allowed me to turn this ‘functionality’ off!

What you’re suggesting is that I automatically/manually promote all of my users to Trust Level 2. That doesn’t feel like a great solution to me!

Only about 6% of our users have made it on their own to Trust Level 2 so far, and have nice little badges on their profiles to prove it…

Basically what this ‘feature’ implies is that the Trust Level system in Discourse is now broken by design!

---

<div class="post-metadata">

### Author: ![Brent\_Thomas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/brent_thomas/32/429710_2.png) [@Brent\_Thomas](https://meta.discourse.org/u/Brent_Thomas)
#### Post date: [28 בדצמבר,‏ 2024,‏ 2:33am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/9 "2024-12-28T02:33:59Z")

</div>

Can I run a program that will just trust the admin just completely unhide the admin

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [28 בדצמבר,‏ 2024,‏ 3:00am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/10 "2024-12-28T03:00:36Z")

</div>

I can definitely appreciate where your coming from. At this moment though a workaround is likely the quickest unless this can be turned off via command line. As there are site settings that are not in the web interface and can be adjusted there.

Maybe if not the team might consider pushing an option to set/adjust this change. If not I imagine a #Customization > Plugin could be sponsored via #Marketplace to add the option in the web interface.

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [28 בדצמבר,‏ 2024,‏ 3:02am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/11 "2024-12-28T03:02:57Z")

</div>

> [@Brent\_Thomas](#):
>
> Can I run a program that will just trust the admin just completely unhide the admin

Welcome to Discourse :discourse: !

Your question is a bit unclear. Can you give further explanation to help with clarity? Maybe an example.

---

<div class="post-metadata">

### Author: ![Jagster](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jagster/32/192154_2.png) [@Jagster](https://meta.discourse.org/u/Jagster)
#### Post date: [28 בדצמבר,‏ 2024,‏ 9:33am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/12 "2024-12-28T09:33:55Z")

</div>

> [@Robin.Grant](#):
>
> Only about 6% of our users have made it on their own to Trust Level 2 so far, and have nice little badges on their profiles to prove it…

And that is important why? For me it looks more like you are using too tight rules.

> [@Robin.Grant](#):
>
> Basically what this implies is that the Trust Level system in Discourse is now broken by design!

No, it is not 😳

---

<div class="post-metadata">

### Author: ![Robin.Grant](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/robin.grant/32/308261_2.png) [@Robin.Grant](https://meta.discourse.org/u/Robin.Grant)
#### Post date: [28 בדצמבר,‏ 2024,‏ 10:29am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/13 "2024-12-28T10:29:03Z")

</div>

> [@Jagster](#):
>
> For me it looks more like you are using too tight rules.

@Jagster - We’re just using the default Discourse rules out of the box - we haven’t tweaked them at all. Our community has only been live for 9 months.

---

<div class="post-metadata">

### Author: ![Jagster](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jagster/32/192154_2.png) [@Jagster](https://meta.discourse.org/u/Jagster)
#### Post date: [28 בדצמבר,‏ 2024,‏ 10:32am UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/14 "2024-12-28T10:32:01Z")

</div>

But… if you don’t adjust settings and are using defaults instead, that isn’t a sign of brokenness. It just tells you that you don’t use settings 😏

---

<div class="post-metadata">

### Author: ![Ed\_S](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ed_s/32/134015_2.png) [@Ed\_S](https://meta.discourse.org/u/Ed_S)
#### Post date: [28 בדצמבר,‏ 2024,‏ 1:41pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/15 "2024-12-28T13:41:54Z")

</div>

I wonder what’s the process, when adding a feature, for deciding whether it needs tunable settings? It feels to me like this feature could indirect through settings, to make it tunable (or indeed possible to disable.)

Of course on a big active forum there will be lots of chaff signups and lots of pre-spammer signups, but that’s not the only use of the software.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [28 בדצמבר,‏ 2024,‏ 2:54pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/16 "2024-12-28T14:54:55Z")

</div>

> [@Robin.Grant](#):
>
> where all new users are pre-vetted before being invited to the community),

Then maybe just make them tl2 when you approve them?

---

<div class="post-metadata">

### Author: ![MihirR](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mihirr/32/475158_2.png) [@MihirR](https://meta.discourse.org/u/MihirR)
#### Post date: [28 בדצמבר,‏ 2024,‏ 4:16pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/17 "2024-12-28T16:16:51Z")

</div>

I agree on all the opinions here tho I do support @Robin.Grant and there should be a tunable setting for it :))

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [28 בדצמבר,‏ 2024,‏ 6:19pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/18 "2024-12-28T18:19:22Z")

</div>

I agree this feature needs further tweaking. I’ve shared your concern internally already. You’ve caught us during a time when many of us are on leave, so please bear with us - we’ll get more eyes on this topic in the next week or so.

Thanks Robin for sharing your use case! It’s not so different from a small private discourse community I manage for my local neighborhood. I invite everyone personally, and as they join they specify their street address and contact phone number. I verify this information personally and correct/add it as needed.

Many of these people don’t ever actually log in again or participate in discussions, but they need to be visible in the directory so their neighbors can get to know them and know how to reach them.

Promoting them to TL2 is an option on my site because badges are not so relevant, but still it’s awkward to promote 100+ existing members without jumping through a bunch of hoops requiring insider knowledge or doing alot of menial clicking through the admin user list.

---

<div class="post-metadata">

### Author: ![Jagster](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jagster/32/192154_2.png) [@Jagster](https://meta.discourse.org/u/Jagster)
#### Post date: [28 בדצמבר,‏ 2024,‏ 6:24pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/19 "2024-12-28T18:24:00Z")

</div>

> [@tobiaseigen](#):
>
> it’s awkward to promote 100+ existing members without jumping through

More than reviewing their addresses and phone numbers manually?

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [28 בדצמבר,‏ 2024,‏ 6:42pm UTC](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524/20 "2024-12-28T18:42:12Z")

</div>

It was a chunk of work at the beginning but that was years ago and is a distant memory. Now the community pretty much runs itself and I only occasionally have to make an update when people leave and join the community.

If I had to go through and update them all now it would be inconvenient and does feel like it should not be necessary.

[Next page](https://meta.discourse.org/t/3-4-0-beta3-restricting-profile-visibility-of-low-trust-level-users/344524.md?page=2)
