# Missing "invite others..." button for staff moderators when PM is disabled

**URL:** <https://meta.discourse.org/t/missing-invite-others-button-for-staff-moderators-when-pm-is-disabled/65930>\
**Category:** Bug\
**Created:** [2017年七月10日 12:16 UTC](https://meta.discourse.org/t/missing-invite-others-button-for-staff-moderators-when-pm-is-disabled/65930 "2017-07-10T12:16:54Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![BaldvinTh](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/baldvinth/32/50395_2.png) [@BaldvinTh](https://meta.discourse.org/u/BaldvinTh)\
**Post date:** [2017年七月13日 14:04 UTC](https://meta.discourse.org/t/missing-invite-others-button-for-staff-moderators-when-pm-is-disabled/65930/3 "2017-07-13T14:04:53Z")

</div>

Another thing with the `can_invite_to`, users with TL below the `SiteSetting.min_trust_to_send_messages` can circumvent creating new PMs by inviting users to PMs created by system (and possibly discobot) when PMs are enabled.

Yes, our users are a creative bunch. 😛

Example repro (I’ve verified this works on our forum):

- Have private messages enabled
- Have `SiteSetting.min_trust_to_send_messages` = TL4
- Create user with TL2
- Go to /u/:username/activity
- Click `Download All` button
- @system will message you with a download link
- Notice there’s a “Invite others…” button in message
- Invite another user to message

---

_[View the full topic](https://meta.discourse.org/t/missing-invite-others-button-for-staff-moderators-when-pm-is-disabled/65930)._