Log when a user impersonates another user

(Steven) #1

Discourse has this great log of all the actions that the admins do (Staff actions).
/{discorse URL}/admin/logs/staff_action_logs

One thing it does not record is when an admin “impersonates” another user. This could be problematic as I want to have moderators and admins to have this ability but I want a log of this action to know when it is happening. To help reduce admin abuse.

(Jeff Atwood) #2

Impersonation is limited to “developer” accounts anyway, only the account that installed Discourse can use this feature. A regular admin appointed after install, cannot.

That is my understanding can you confirm @sam?

(Sam Saffron) #3

Admins can impersonate anyone except for other admins
Developers can impersonate anyone
Moderators can not impersonate

We should log this regardless

(Régis Hanol) #4

And we do now :poodle:

(Régis Hanol) #5