# I would like a site setting that allows TL0 to PM staff
**URL:** https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296
**Category:** Feature
**Created:** [Dezembro 20, 2014, 5:55pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296 "2014-12-20T17:55:12Z")
**Posts on this page:** 20
**Page:** 3
### Author:  [@TechnoBear](https://meta.discourse.org/u/TechnoBear)
#### Post date: [Dezembro 23, 2014, 1:05pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/41 "2014-12-23T13:05:53Z")
> [@codinghorror](#):
>
> You are missing my point, whatever Q they have should be in a place where they can find the answer themselves, first.
There is, of course, also the fact that TL0 members may have the same legitimate reasons for wanting to contact a staff member as TL1, TL2 or TL3 members - all of whom can do so with no problem. Just because they’re new members doesn’t necessarily mean their issue is covered in the FAQs.
Or what if they receive an offensive or Spam PM from another member? How do they report that?
---
### Author:  [@frbn](https://meta.discourse.org/u/frbn)
#### Post date: [Dezembro 23, 2014, 1:13pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/42 "2014-12-23T13:13:47Z")
Are there plans to make the trust levels more configurable? This seems like it calls for a setting (“Enable PM feature at TL …” for example).
---
### Author:  [@HAWK](https://meta.discourse.org/u/HAWK)
#### Post date: [Dezembro 23, 2014, 5:14pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/43 "2014-12-23T17:14:24Z")
> [@codinghorror](#):
>
> (every new user sends private messages every time they have a newbie question) fundamentally does not scale.
Makes no sense either. Newbie questions should be public to guide other newbies.
But there are still legit reasons to allow ANY member to be able to easily PM staff.
If you go to a busy airport in a country where you don’t speak the language, even with lots of signs there are still times when you just want to talk to a person.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Dezembro 31, 2014, 4:37am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/44 "2014-12-31T04:37:57Z")
In the meantime, I added this text to the bottom of all welcome PMs:
> (If you need to privately communicate with [staff members](https://meta.discourse.org/about) as a new user, just reply to this private message.)
I am open to making the PM trust level configurable, right now you must hold TL 1 to PM, I personally think it’s a massive griefing hole / vector to set that to zero, but as long as that’s not the default probably fine.
---
### Author:  [@anon21958287](https://meta.discourse.org/u/anon21958287)
#### Post date: [Janeiro 1, 2015, 12:58pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/45 "2015-01-01T12:58:08Z")
> [@codinghorror](#):
>
> right now you must hold TL 1 to PM, I personally think it’s a massive griefing hole / vector to set that to zero
It seems like it shouldn’t be a huge problem if TL0 could PM staff but not others, since a staff member could quickly stop the problem.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Janeiro 1, 2015, 9:32pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/46 "2015-01-01T21:32:07Z")
Depends; if every new user can pm any staff member they could pile up hundreds of pms from a bunch of new accounts before the staff member is aware (or even around).
How would I know if some other Staff member is getting PM griefed? PMs are basically invisible unless we explicitly browse the profile of a random new user and look for them.
---
### Author:  [@sam](https://meta.discourse.org/u/sam)
#### Post date: [Janeiro 1, 2015, 9:39pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/47 "2015-01-01T21:39:46Z")
technically you could grief the account that sends the welcome PM already today, so this would slightly widen the potential havoc but not introduce something radically different.
---
### Author:  [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [Janeiro 1, 2015, 11:18pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/48 "2015-01-01T23:18:55Z")
Perhaps I am missing something…
Does anybody actually receive email notifications for the `system` user other than `system`.
Perhaps I missed a setup step - but for me `system` doesn’t have an email address:
And as such you wouldn’t ever know if a user has replied to the welcome email.
I’m guessing this might be the case with a lot of installations?
---
### Author:  [@Apecengo](https://meta.discourse.org/u/Apecengo)
#### Post date: [Janeiro 1, 2015, 11:31pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/49 "2015-01-01T23:31:17Z")
I have not tried this, but I’m sure you can change the system account email by going to its public profile and changing its preferences. (/users/system/preferences/email)
---
### Author:  [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [Janeiro 1, 2015, 11:42pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/50 "2015-01-01T23:42:11Z")
I am aware of the ability to set the email address…
But for me the question is if it is not a required setup - then perhaps the welcome message shouldn’t indicate users can message `system`.
I was wondering how many installations really have this set.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Janeiro 1, 2015, 11:55pm UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/51 "2015-01-01T23:55:47Z")
The admin page nags you if you don’t have this set to an actual user.
---
### Author:  [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [Janeiro 2, 2015, 12:08am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/52 "2015-01-02T00:08:23Z")
> [@codinghorror](#):
>
> Depends; if every new user can pm any staff member they could pile up hundreds of pms from a bunch of new accounts before the staff member is aware (or even around).
Won’t happen, at least on any forum that truly is active. Any active forum will have mods in place and likely have mods that span timezones, so the chances that this occurs is negligible. Plus with how easy it is to ban a user, I, as a mod, wouldn’t care. I’ll have that user knocked out and blacklisted pretty darn quick!
---
### Author:  [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [Janeiro 2, 2015, 12:22am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/53 "2015-01-02T00:22:17Z")
> [@codinghorror](#):
>
> The admin page nags you if you don’t have this set to an actual user
Assuming the nags are in the usual place - I don’t see any.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Janeiro 2, 2015, 12:58am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/54 "2015-01-02T00:58:01Z")
The average Discourse instance is not very active to put it mildly. It would be a massive increase in attack surface area on every Discourse instance in the whole world. And one that is very difficult to see.
@DeanMarkTaylor I will have to check to make sure that is part of the default setup nags, I could have sworn it was. The idea is that the “welcome to the site!” message ideally comes from a staff member so it is more personal. Regardless, if you read the text of what was added, it points to /about so you can even figure out who the moderators _are_.
---
### Author:  [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [Janeiro 2, 2015, 1:10am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/55 "2015-01-02T01:10:29Z")
> [@codinghorror](#):
>
> The average Discourse instance is not very active to put it mildly. It would be a massive increase in attack surface area on every Discourse instance in the whole world. And one that is very difficult to see.
I don’t agree with you at all on this, but that’s how it goes when you don’t actually run or moderate a forum…
Spamming mods is idiotic and they’ll get banned quickly (as I previously stated and you know that process is dead simple). The fact they can technically do this to a single member now anyway, makes your point irrelevant.
You aren’t really making it any harder for them to do this today, you are simply permitting the scope of their target to be a bit wider (which actually makes it easier to catch, as more people will likely get the PM and act on it). If they aren’t doing it today, why do you assume opening the scope wider will make it happen with such a frequency that it becomes a massive problem?
---
### Author:  [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [Janeiro 2, 2015, 1:15am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/56 "2015-01-02T01:15:42Z")
Ninja’d
We seem to be dancing around in circles here and sorry, I’ve never been much of a dancer.
Allowing _anyone_ regardless of Trust Level or even if unregistered, to contact Staff is important.
By PM is the logical method. Somewhere visible while on the site is the logical place.
---
### Author:  [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [Janeiro 2, 2015, 1:16am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/57 "2015-01-02T01:16:53Z")
> [@codinghorror](#):
>
> Regardless, if you read the text of what was added, it points to /about so you can even figure out who the moderators are.
Sigh, but that doesn’t help them if they can’t connect anyone but the sender of the Welcome message… Why point them to a page where the workflow would be:
1. Click on a staff member’s name
2. Find a way to communicate with said member… oh wait. You can’t. ☹
It just seems silly to me that there is such a reservation to allowing members to be able to contact staff, yet all signals say: “contact staff”.
Plus, it is a tad bit silly to say, “they can spam via PM” when they could theoretically do that now with the welcome PM.
Ideally the PM button for TL 0 would only show up on Staff Profiles and User Cards. It gives any user a way to reach them (via the about page, a post, a topic, topic list, etc.) but doesn’t publicize PM in an outrageous way.
---
### Author:  [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [Janeiro 2, 2015, 1:19am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/58 "2015-01-02T01:19:15Z")
If you have ever ran a normal website with a “Contact Us” form you will find that SPAM directed specifically at the owners / website developers is normal. “`Get your website to the top spot on Google`” etc.
I would imagine that forum moderators / admins would be similarly targeted with SPAM as @codinghorror mentions.
Personally as a web developer I see my customers receive over 30 a day - these are mostly filtered or managed via Akismet etc.
---
### Author:  [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [Janeiro 2, 2015, 1:20am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/59 "2015-01-02T01:20:54Z")
> [@DeanMarkTaylor](#):
>
> I would imagine that forum moderators / admins would be similarly targeted with SPAM as @codinghorror mentions.
Maybe so, but wouldn’t you deal with it? Or is it more "I don’t want to be bothered, whether it results in collateral damage or not?
In my experience Contact form SPAM isn’t so much about SPAMming the site Admin as it is header injection. A PM to Staff is a different thing.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Janeiro 2, 2015, 1:26am UTC](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296/60 "2015-01-02T01:26:20Z")
I don’t think you are actually thinking this through @cpradio … I have visibility and admin/mod into hundreds of Discourse instances. There is a reason we sandbox new users.
Consider if user X just gets pissed off at user Y. User Y happens to be an admin or moderator – and remember _admin state isn’t even visible in the UI any more_. Heck, even if they know that person’s a moderator, _now they can individually PM every single staff member to tell them how much they hate that other staff member_. Now they have a very good griefing tool in private messaging that’s not gated by anything other than how fast they can sign up new accounts.
They can create tons of new sockpuppet accounts and PM all the staff they want seconds after creating the new account (subject to standard new user rate limits, and other existing rate limits, of course).
I guarantee you the first thing a suspended user is thinking is, how can I create a new account and create as much havoc as possible? Well, with "let all new users PM staff’, they now have a much more powerful weapon at their disposal. The complaining will be endless and it will go directly via PM to every staff member. That makes it _personal_.
Besides, the deeper problem you’re looking at is confused newbies – these users won’t even know how to PM! I don’t feel that the tradeoff of
- massively increased attack area for all new users across all discourse instances
is a better solution than
- **putting a plain clickable email address somewhere for these confused new users to click or tap on**.
Something like:
> Confused? Don’t understand? Can’t figure out what’s going on? Need special help? Visit [our FAQ](http://example.com), try posting in our [member help category](http://example.com) and if that doesn’t help, [try our email contact form](http://example.com).
… perhaps as a banner, part of the welcome message, etcetera.
And I want to reiterate **users this confused won’t even know how to PM!** So if you gave them this PM staff as TL0 ability, I sincerely doubt they would even be able to figure out how to use it.
I just fundamentally disagree that this is the right way to solve the problem that you’re seeing. I think a) there are better solutions to the problem you have and b) the specific proposed solution is rather risky and opens the door to a lot of griefing and other problems from new users, worldwide, on every Discourse instance there ever is, or ever will be.
[Previous page](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296.md?page=2)
[Next page](https://meta.discourse.org/t/i-would-like-a-site-setting-that-allows-tl0-to-pm-staff/23296.md?page=4)