Log when a user impersonates another user

funvill · 11월 5, 2014, 8:00오전

Discourse has this great log of all the actions that the admins do (Staff actions).
/{discorse URL}/admin/logs/staff_action_logs

One thing it does not record is when an admin “impersonates” another user. This could be problematic as I want to have moderators and admins to have this ability but I want a log of this action to know when it is happening. To help reduce admin abuse.

codinghorror · 11월 6, 2014, 2:39오전

Impersonation is limited to “developer” accounts anyway, only the account that installed Discourse can use this feature. A regular admin appointed after install, cannot.

That is my understanding can you confirm @sam?

sam · 11월 6, 2014, 3:41오전

Admins can impersonate anyone except for other admins
Developers can impersonate anyone
Moderators can not impersonate

We should log this regardless

github.com/discourse/discourse

lib/guardian.rb

b09ad8709


      
          # Can we impersonate this user?
          def can_impersonate?(target)
            target &&
          
            # You must be an admin to impersonate
            is_admin? &&
          
            # You may not impersonate other admins unless you are a dev
            (!target.admin? || is_developer?)
          
            # Additionally, you may not impersonate yourself;
            # but the two tests for different admin statuses
            # make it impossible to be the same user.
          end

zogstrip · 11월 6, 2014, 9:59오전

And we do now

https://github.com/discourse/discourse/commit/bb2d53819431ba92d45b20950854dfc8131c858c

글		댓글	조회수
Add 'stop impersonating' link to user avatar dropdown when impersonating Feature completed , impersonate	42	7609	10월 29, 2025
Allow specific users to impersonate defined users Development impersonate	9	1016	5월 5, 2024
Impersonate a user and returning to admin user Site Management how-to , impersonate , users	4	6493	2월 25, 2026
The Impersonated user should be notified that they are being Impersonated Feature impersonate	21	2477	5월 7, 2019
Recursive Impersonation Support impersonate	14	1699	9월 3, 2021

Log when a user impersonates another user

Related topics