# إرسال بريد إلكتروني إلى المستخدمين المرحّلين غير الموقوفين للمراجعة

**URL:** https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068
**Category:** Feature
**Created:** [28 مارس 2018، 8:34م UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068 "2018-03-28T20:34:32Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![jordan1909](https://avatars.discourse-cdn.com/v4/letter/j/9f8e36/32.png) [@jordan1909](https://meta.discourse.org/u/jordan1909)
#### Post date: [28 مارس 2018، 8:34م UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/1 "2018-03-28T20:34:32Z")

</div>

I just began testing a new plugin I am working on. After testing this further I began sending emails for both staged and real users.

I have found, on 3 installations (dev, sandbox and live sites), that staged user emails are not being held for moderation.

Is this by design? I cannot find a site setting that allows me to control this. I’ve tested this on Discourse versions: [v2.0.0.beta5 +64](https://github.com/discourse/discourse/compare/a8f211bd4120913d7019f692674edd52128c4eff...tests-passed) and [v2.0.0.beta4 +239](https://github.com/discourse/discourse/compare/dcd1d422d1251f104abdecb72d151ea7c4357dfb...tests-passed).

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [29 مارس 2018، 12:05ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/2 "2018-03-29T00:05:48Z")

</div>

> [@jordan1909](#):
>
> I have found, on 3 installations (dev, sandbox and live sites), that staged user emails are not being held for moderation.

What setting(s) have you changed to cause topics/replies to be held for moderation?

---

<div class="post-metadata">

### Author: ![jordan1909](https://avatars.discourse-cdn.com/v4/letter/j/9f8e36/32.png) [@jordan1909](https://meta.discourse.org/u/jordan1909)
#### Post date: [29 مارس 2018، 12:17ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/3 "2018-03-29T00:17:28Z")

</div>

It works correctly for regular users when I set:

Approve unless tl \> 3  
Approve new topics unless tl \> 3

I have also tried playing with approve post count but that doesn’t seem to do anything here.

That works for currently regisistered users just not staged users. Unless I am mistaken those seem to be the pertinent fields.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [29 مارس 2018، 12:36ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/4 "2018-03-29T00:36:19Z")

</div>

It’s possible that mail from anonymous users does not go through the same path as a regular user. Anonymous users do not have a “trust level” so this could be an edge case. Let me go test this…

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [29 مارس 2018، 12:37ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/6 "2018-03-29T00:37:34Z")

</div>

I’m fairly sure this is by design

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [29 مارس 2018، 12:38ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/7 "2018-03-29T00:38:53Z")

</div>

> [@codinghorror](#):
>
> I’m fairly sure this is by design

In that case (before I go do testing) I guess I need to ask “why”? If TL0 users (who you don’t trust) require approval, why should an anonymous user (who you know even less about) get through without approval?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [29 مارس 2018، 12:43ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/8 "2018-03-29T00:43:06Z")

</div>

Because they are mutually exclusive settings – when you allow anon email randos to reply, you are explicitly saying “I don’t care about approvals, just let everything through.”

The TL3 requirement would imply they had a Discourse account, how is that _even possible_ when a post is submitted via email? How does an email account achieve TL3?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [29 مارس 2018، 12:45ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/9 "2018-03-29T00:45:33Z")

</div>

> [@codinghorror](#):
>
> How does an email account achieve TL3?

It can’t. Thus the assumption (at least on my part) that the post would go through approval. An anonymous account is \<TL3.

If this is an intentional design decision I’m not going to do any testing. I would support a site setting for “must approve anonymous public topics” though.

---

<div class="post-metadata">

### Author: ![jordan1909](https://avatars.discourse-cdn.com/v4/letter/j/9f8e36/32.png) [@jordan1909](https://meta.discourse.org/u/jordan1909)
#### Post date: [29 مارس 2018، 12:48ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/10 "2018-03-29T00:48:44Z")

</div>

@codinghorror

I would definitely anticipate requiring staged users to pass through the same approval  
process.

> [@codinghorror](#):
>
> when you allow anon email randos to reply, you are explicitly saying “I don’t care about approvals, just let everything through.”

I don’t necessarily agree here, while you are allowing anon users to submit content, if you have enabled moderation I would imagine you would want to confirm said content.

As @jomaxro mentioned, a site setting on this would definitely be useful and in a setting where everything is pretty moderated almost required.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [29 مارس 2018، 12:49ص UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/11 "2018-03-29T00:49:10Z")

</div>

Feel free to submit a pull request if you wish to change the way the feature behaves.

---

<div class="post-metadata">

### Author: ![jordan1909](https://avatars.discourse-cdn.com/v4/letter/j/9f8e36/32.png) [@jordan1909](https://meta.discourse.org/u/jordan1909)
#### Post date: [29 مارس 2018، 1:26م UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/12 "2018-03-29T13:26:00Z")

</div>

PR Submitted: [#5721](https://github.com/discourse/discourse/pull/5721)

---

<div class="post-metadata">

### Author: ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)
#### Post date: [8 أبريل 2018، 6:21م UTC](https://meta.discourse.org/t/email-staged-users-not-held-for-moderation/84068/13 "2018-04-08T18:21:08Z")

</div>

PR merged
