# כיצד להשבית את הפורום פרט לצוות
**URL:** https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832
**Category:** Support
**Created:** [8 באפריל, 2024, 6:14am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832 "2024-04-08T06:14:20Z")
**Posts on this page:** 14
**Page:** 1
### Author:  [@Isambard](https://meta.discourse.org/u/Isambard)
#### Post date: [8 באפריל, 2024, 6:14am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/1 "2024-04-08T06:14:20Z")
My forum was attacked and spammed with posts that we don’t want visible. How can the forum be disabled except for staff to clean it up?
---
### Author:  [@merefield](https://meta.discourse.org/u/merefield)
#### Post date: [8 באפריל, 2024, 7:22am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/2 "2024-04-08T07:22:57Z")
You can’t “turn off” the forum and it magically still be useable by anyone.
You could consider bulk unlisting of all topics until you get chance to delete the spam, then relist everything that remains?:
> [@Administrative Bulk Operations](https://meta.discourse.org/t/administrative-bulk-operations/118349):
>
> Below you will find a collection of bulk operations that can be initiated from the command line. You will need SSH access, so if you are a hosted customer, you will need to contact the Discourse team about running these commands. warning Before working with the console it is extremely important that you have a recent backup. Mistakes can always happen! First thing to do is enter your site’s container: cd /var/discourse ./launcher enter app Additional Guides: [Performing bulk actions a…](https://meta.discourse.org/t/performing-bulk-actions-as-a-moderator/272832)
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [8 באפריל, 2024, 9:18am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/3 "2024-04-08T09:18:16Z")
You can set the forum to be read only except for staff. [Read Only Modes in Discourse](https://meta.discourse.org/t/read-only-modes-in-discourse/296976)
---
### Author:  [@merefield](https://meta.discourse.org/u/merefield)
#### Post date: [8 באפריל, 2024, 9:19am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/4 "2024-04-08T09:19:26Z")
> [@Isambard](#):
>
> we don’t want visible
@pfaffman that doesn’t solve the “visible” part though 👀
---
### Author:  [@nathank](https://meta.discourse.org/u/nathank)
#### Post date: [8 באפריל, 2024, 10:00am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/5 "2024-04-08T10:00:18Z")
I’d simply change all of the category permissions to staff only. With a nice explainer somewhere (of course).
You might like to do a [data explorer](https://meta.discourse.org/t/32566?silent=true) query to record your existing permissions first, and if your forum is large/complex maybe do it all from the Rails console as a bulk action.
That would achieve what you need. And you could reveal content as it is cleaned up, category by category.
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [8 באפריל, 2024, 10:14am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/6 "2024-04-08T10:14:27Z")
I was considering a similar issue recently -
Would the steps be
- ~~Enable staff writes only mode [Read Only Modes in Discourse](https://meta.discourse.org/t/read-only-modes-in-discourse/296976)~~
- Enable `login required` in admin settings
- [Logout all users through the rails console](https://meta.discourse.org/t/logout-all-users-through-the-rails-console/93239)
- Disable `enable local logins` (and any SSO).
- Use `/u/admin` to login as admin
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [8 באפריל, 2024, 4:17pm UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/7 "2024-04-08T16:17:06Z")
> [@merefield](#):
>
> @pfaffman that doesn’t solve the “visible” part though 👀
OH. I missed that.
In that case, what you’d need to do is change DNS so that it no longer points to the forum and have the admins configure their `/etc/hosts` (Or equivalent) to point to the correct IP address. But that’s not really a Discourse thing, that’s a sysadmin hack.
---
### Author:  [@Isambard](https://meta.discourse.org/u/Isambard)
#### Post date: [9 באפריל, 2024, 6:24am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/8 "2024-04-09T06:24:58Z")
Thanks. There were few enough categories for this to be doable by hand (if somewhat annoying).
---
### Author:  [@nathank](https://meta.discourse.org/u/nathank)
#### Post date: [9 באפריל, 2024, 6:28am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/9 "2024-04-09T06:28:25Z")
> [@JammyDodger](#):
>
> Would the steps be
>
> - Enable staff writes only mode [Read Only Modes in Discourse](https://meta.discourse.org/t/read-only-modes-in-discourse/296976)
> - Enable `login required` in admin settings
> - [Logout all users through the rails console](https://meta.discourse.org/t/logout-all-users-through-the-rails-console/93239)
I don’t think this would work, as they could simply log back in:
> [@Read Only Modes in Discourse](https://meta.discourse.org/t/read-only-modes-in-discourse/296976/1):
>
> Restricts _standard users_ from write operations in the forum, such as posting, commenting, or liking. Standard users are limited to read-only operations, but can still login to access the site.
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [9 באפריל, 2024, 6:32am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/10 "2024-04-09T06:32:16Z")
I did have second thoughts about that bit afterwards. Do you think disabling local logins would be a suitable alternative/additional step? (And/or any SSO)
---
### Author:  [@nathank](https://meta.discourse.org/u/nathank)
#### Post date: [9 באפריל, 2024, 6:40am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/11 "2024-04-09T06:40:08Z")
You’d need to turn off any OAuth methods too of course, but yes that could work nicely. Just be careful you don’t log off yourself (e.g. restore the site) inadvertently.
Although in that case you can simply turn logins back on from the console. Are you planning this for meta 😜?
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [9 באפריל, 2024, 6:57am UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/12 "2024-04-09T06:57:03Z")
Ha, no, nothing like that. Mainly just curiosity. 🙂 It seems like a useful plan to have in case of any emergencies. Though if there are too many steps then something else might be easier.
I’ll edit in the extra step above. 👍
* * *
Thinking about it, logging everyone out and then disabling logins may make staff write only unnecessary?
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [8 במאי, 2024, 4:24pm UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/13 "2024-05-08T16:24:03Z")
> [@nathank](#):
>
> I don’t think this would work, as they could simply log back in:
I’ve actually just tested this for something else, and enabling ‘read-only’ from the backup page prevented my test user from logging in to the site:
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [7 ביוני, 2024, 4:24pm UTC](https://meta.discourse.org/t/how-to-turn-off-forum-except-for-staff/302832/14 "2024-06-07T16:24:24Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.