Moderator can edit User Names and other properties of users and admins

(Joshua Joma) #1

We are testing an discourse at the moment.

There is the possibility for the moderator accounts to change the username, name, title,badges and trust level of users and even admins.Moderators are able to silence user including other moderators and admins. That doesn’t seem right. We checked with several moderator accounts. Also an update to Installed v2.2.0.beta9 +54 doesn’t change this behavior.

How can we restrict the moderators rights to simply moderating content?


(Jay Pfaffman) #2

Check out Description of various user states in Discourse and Discourse Moderation Guide.

(Gerhard Schlager) #3

You should consider promoting them to trust level 4 instead of giving them moderator rights if you don’t trust them fully. TL4 users can do mostly the same as mods, minus things like changing usernames.