I am wondering how this complies with Human Rights to privacy and uninterruptedness (?) of private communication.
What’cha thinking?
Are you saying all an admin has to do is to navigate to a user’s profile, and they can see that user’s private messages?
I am not sure if it’s as easy as Bill is suggesting, but it would be easy enough to look at PMs via the database anyway.
I think they should be called conversations or personal or direct messages rather than private, because saying they are private leaves a user with an expectation of privacy where measures are put in place so the messages are indeed private.
2개의 좋아요
Yes all an admin has to do is go to a user’s profile page and browse away at their private messages.
This should be fixed, there’s no reason it needs to be that easy for an admin to view supposedly private messages.
4개의 좋아요
Not all admins have direct database access.
Seconded. Or at least a toaster that warns that private messages are not that private really and people shouldn’t post sensitive data there (with a “don’t show this again” checkbox, of course).
1개의 좋아요
You shouldn’t have lots of admins or even moderators. My community of 1000 members has 1 admin (me) and 1 highly trusted moderator.
You should be using the Leader and Elder trust levels for everything else. Those people can help with pinning posts, cleaning up the forum, and making sure things are nice and tidy. This comes without any access to private user data which only I have (the same person that could simply query the database).
2개의 좋아요
Agreed. PMs should only be visible to an admin if that admin is impersonating the user. Oh wait, I feel like we’ve had that discussion before, too…
https://meta.discourse.org/t/impersonation-and-reading-private-messages/8485
3개의 좋아요
Then why would they want to be members there?
IMHO if you can’t trust the Admin - don’t join the site.
I agree that personal messages should not be visible to others except the Admin (NOT Moderators) on a need to know basis.
There may be times when an Admin needs to check PMs to resolve an issue.
모더레이터는 수신자로 추가되었거나, 개인 메시지가 신고되어 검토 대기열에 등록된 경우에만 개인 메시지를 볼 수 있습니다.
관리자는 개인 메시지를 포함하여 사이트에 대한 완전한 접근 권한을 가집니다. 그러나 활성화 시 다른 사용자의 개인 메시지에 접근할 때 이를 로그에 기록하는 특수 설정이 있습니다.
개인 메시지의 절대적 프라이버시를 보장하기를 원하는 관리자에게는 Discourse Encrypt (for Private Messages) 플러그인을 설치하는 것을 권장합니다.
8개의 좋아요