I really need a way for users to add sensitive data to a post without using private messages. I have this in a plugin: require_dependency "plugin/filter" Plugin::Filter.register(:after_post_cook) do |post, cooked| index=0 cooked.gsub(/\[secret\].*?\[\/secret\]/) { |a| index+=1; "<div cla…

Perhaps if you describe the bigger picture of what you’re trying to achieve, you’ll avoid falling foul of the XY problem .

Thanks, @mpalmer ! That’s awesome. I’ve been aware of the XY Problem for at least 30 years, but never knew what to call it.

@mpalmer Sure! I’m using a Discourse category for handling product support, and other categories for discussion. Sometimes users need to share their site URL or even login information with us in a way that keeps the topic itself readable to others, but our staff can still see that info.

Maybe you want to do something that puts the information in a PM and inserts a link to the PM (perhaps semi-hidden as you’ve attempted previously)

It would be really great if the information was just inline somehow. It’s a bit more involved, but the next concept I’m currently exploring involves using add_to_serializer to supply a custom field when viewed by the post owner or admin/moderator. Instead of the shortcode style method I originally w…

The fact that you sent a PM to someone in reference to a post is noted below the post, but this might be a staff-only thing.

Let me know what you guys think of this method. It will need a custom UI put together, but the idea is that a custom post field is used to store the private information. It’s added to the serializer if the user is staff or the OP, and can be piped down into the post stream. Does this look secure? I…

For me, personally, I’d just say “PM me the <details>”, and save writing a custom plugin…

@mpalmer That works, but really slows down the process. It isn’t very scalable. For example, with inline private data the user can attach a private URL before the topic even gets a response. The next person able to work on the ticket may not have been the one requesting the login credentials. If the…

You need to make these people staff and use whispers. That is exactly what whispers are for – if staff are the ones with the secret. Granted with customer secrets you can’t but in this case use incoming email to trigger a group PM. That is how team@discourse.org works for example. Then the topic, i…

Is this secure? Concept for private info in replies

开发

Falco (Falco) 2021 年12 月 9 日 14:02 21

Discourse Private Replies 差不多

话题		回复	浏览量
Ways to post confidential info for moderator eyes only? Feature	44	11076	2016 年8 月 18 日
Secret Text Plugin Development	7	1239	2018 年8 月 25 日
Discourse Private Replies Plugin	58	8179	2025 年9 月 8 日
Way to make part of the post visible to author and staff only? Feature	27	2085	2025 年11 月 17 日
Hide part of post Feature	1	1203	2016 年6 月 13 日

Is this secure? Concept for private info in replies

相关话题