# Moderator email viewing rights changed?

**URL:** https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187
**Category:** Support
**Created:** [December 28, 2018, 1:14pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187 "2018-12-28T13:14:10Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Ingrid](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ingrid/32/76574_2.png) [@Ingrid](https://meta.discourse.org/u/Ingrid)
#### Post date: [December 28, 2018, 1:14pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/1 "2018-12-28T13:14:10Z")

</div>

Did the moderator rights change in de latest update? (2.2.0 beta6 +76)

We enter our member details into our CRM, including e-mail address. The e-mail address is no longer visible in the member profile for a user with moderator rights.

Is there a way to view the e-mail address for a moderator?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [December 28, 2018, 5:41pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/2 "2018-12-28T17:41:21Z")

</div>

> [@Ingrid](#):
>
> Did the moderator rights change in de latest update?

Sort of. We removed the ability for moderators to view email addresses many updates ago (early 2018 if I recall correctly), but missed a spot (the user list in `/admin`). This was addressed in the most recent upgrade.

> [@Ingrid](#):
>
> Is there a way to view the e-mail address for a moderator?

No, not at the moment. We had numerous requests for moderators to not be able to view emails. The requests were generally due to privacy concerns: some sites have moderators who are community volunteers, or otherwise not part of the company running the forums. Users of the forums consented to the company running the forum seeing their email, but not volunteers who are not subject to privacy rules and guidelines that a company employee would be.

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [December 28, 2018, 9:30pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/3 "2018-12-28T21:30:56Z")

</div>

Isn’t this behind a site setting?  
Or rather behind a button click? That way the action is logged.

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [December 28, 2018, 9:52pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/4 "2018-12-28T21:52:26Z")

</div>

So, the Show Emails button still exists for the Admin Users page, but clicking it does nothing as a moderator, though it still logs the action in the Logs. The emails do not become visible. This feels broken to me.

It works on the Admin \> User page and the Public User page though.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [December 28, 2018, 9:55pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/5 "2018-12-28T21:55:51Z")

</div>

Testing on Sitepoint? You don’t have the commit yet…

Actually, looking at the deploy logs, most hosted sites don’t have it yet. Didn’t want to deploy too close to the holidays with most of the team off…

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [December 28, 2018, 10:12pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/6 "2018-12-28T22:12:38Z")

</div>

No, I tested on my Sandbox which I just upgraded. Should happen here too if you can impersonate a moderator

**Edit:**  
Works for admins just not moderators.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [December 28, 2018, 10:57pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/7 "2018-12-28T22:57:47Z")

</div>

That’s … unexpected. Will test when back to my PC.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [December 29, 2018, 3:01am UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/8 "2018-12-29T03:01:49Z")

</div>

> [@cpradio](#):
>
> **Edit:**  
> Works for admins just not moderators.

OK, now I’m confused. Can you view emails as a moderator on your sandbox? I just tested on [try.discourse.org](http://try.discourse.org) and cannot.

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [December 29, 2018, 11:36am UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/9 "2018-12-29T11:36:09Z")

</div>

I can on the public profile and the admin user profile pages clicking the show email button…

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [December 29, 2018, 11:46am UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/10 "2018-12-29T11:46:14Z")

</div>

Screenshots

Admin User Page

 ![Screenshot_20181229-064037_Chrome](https://global.discourse-cdn.com/meta/original/3X/e/f/ef2193f1346c5777ef7e18bd72c7efad522c45df.jpeg)

 ![Screenshot_20181229-064051_Chrome](https://global.discourse-cdn.com/meta/original/3X/4/6/468317fc55313e6dbabaed26db40be3893ba80cf.jpeg)

* * *

Admin User List

 ![Screenshot_20181229-064105_Chrome](https://global.discourse-cdn.com/meta/original/3X/d/2/d21e4a34645914cf6729d4a36f7100cde76e0eb6.jpeg)  
(No change after clicking button)  
 ![Screenshot_20181229-064118_Chrome](https://global.discourse-cdn.com/meta/original/3X/a/b/ab1255a259cb97de28db287a6e4a8aa62159d1e4.jpeg)

* * *

Public Profile Page

 ![Screenshot_20181229-063936_Chrome](https://global.discourse-cdn.com/meta/original/3X/f/8/f8041133c011baa5e97c32b2017568774903b480.jpeg)

 ![Screenshot_20181229-064028_Chrome](https://global.discourse-cdn.com/meta/original/3X/8/6/864262eaf76ac4bc393a15706e839f4822787e54.jpeg)

* * *

Impersonated User Setup (moderator, TL3)

 ![Screenshot_20181229-063903_Chrome](https://global.discourse-cdn.com/meta/original/3X/a/2/a2a14cd89f282b34faaa6a5376457fcad4c064d4.jpeg)

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [December 29, 2018, 4:15pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/11 "2018-12-29T16:15:20Z")

</div>

> [@cpradio](#):
>
> Isn’t this behind a site setting?

Your initial thought was correct. Can you confirm that the site setting `moderators_view_emails` is enabled on your sandbox. With that setting disabled (default) as a moderator I cannot see emails anywhere. With the setting enabled, the “show emails” button reappears for mods, clicking it on the admin user list does not reveal emails, but clicking it on admin user page and user profile does reveal it. Oddly enough clicking on the button in user preferences also doesn’t work.

* * *

This is indeed confusing, inconsistent, and the setting’s description isn’t exactly clear. @codinghorror, two suggestions:

1. Fix the site setting `moderators_view_emails` so that it matches it’s description. It should only show the “show email” button on a user’s profile page, nothing else.
2. Add a boolean site setting for `moderator view email`. When enabled, mods can access emails everywhere admins can. When disabled (default), no email access regardless of other settings.

#1 seems more pressing (the setting adds broken buttons for moderators), #2 could perhaps be a 2.3 feature? It has been requested a few times since we started hiding emails from moderators.

---

<div class="post-metadata">

### Author: ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)
#### Post date: [December 29, 2018, 5:34pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/12 "2018-12-29T17:34:19Z")

</div>

> [@jomaxro](#):
>
> Can you confirm that the site setting `moderators_view_emails` is enabled on your sandbox

I do indeed.

> [@jomaxro](#):
>
> #2 could perhaps be a 2.3 feature? It has been requested a few times since we started hiding emails from moderators.

Yes please. On our community the moderators use the email addresses fairly regularly.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [December 29, 2018, 6:59pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/13 "2018-12-29T18:59:06Z")

</div>

Isn’t there a third option here, to edit the copy for the setting (and fix any bugs) so it reflects the intent, which is show email to moderators on profile?

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [December 29, 2018, 7:02pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/14 "2018-12-29T19:02:54Z")

</div>

That wasn’t my understanding of the intent of the setting though. By default email is only shown on the user preferences page (`/u/my/preferences`) and to admins on the admin user page (`/admin/users/{user_id}`) - this setting shows it on the profile page (`/u/my/summary`) alongside the stats like join date, last seen, last posted, etc.

I wouldn’t personally object to changing the intent of the setting, but I don’t know the history of why this setting exists…

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [December 29, 2018, 7:04pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/15 "2018-12-29T19:04:46Z")

</div>

If you don’t know the history of the setting _how do you know the intent?_ What I remember is the intent, which I thought was to allow moderators to see emails.

Possible it is buggy now though.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [December 29, 2018, 7:05pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/16 "2018-12-29T19:05:53Z")

</div>

Per `git blame` @eviltrout introduced it 4 years ago: [FEATURE: Site setting to enable displaying email on user profiles for · discourse/discourse@dc78950 · GitHub](https://github.com/discourse/discourse/commit/dc789502f978903053f8f0e00070f0f0d18f963b)

When I said “intent” I was referring to how it worked before we started restricting mods from seeing emails. I can’t speak to before that.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [December 30, 2018, 5:43am UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/17 "2018-12-30T05:43:25Z")

</div>

What I remember is us adding this setting to cover this exact scenario? Moderators who need email visibility.

---

<div class="post-metadata">

### Author: ![Ingrid](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ingrid/32/76574_2.png) [@Ingrid](https://meta.discourse.org/u/Ingrid)
#### Post date: [January 3, 2019, 8:32am UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/18 "2019-01-03T08:32:08Z")

</div>

Thank you all for looking into this. I didn’t completely understand everything, but I did enable the option “show email on profile” and the moderators are able to see the e-mail address again. So that works for us.

Thanks again and Happy New Year!

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [January 3, 2019, 8:57am UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/19 "2019-01-03T08:57:08Z")

</div>

We should improve the copy here @jomaxro to clarify this is to cover the moderator case.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [January 3, 2019, 6:32pm UTC](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187/20 "2019-01-03T18:32:34Z")

</div>

Sure, I can update the copy here. So this setting, when enabled, should allow mods to view emails? Should it work only on their profile, or everywhere?

At the moment, with this setting enabled mods can see 4 show email buttons. 2 work, 2 don’t.

- ✅ `/admin/users/{user_id}`: shows email and logs `check email` with context.
- ✅ `/u/{username}/summary`: shows email and logs `check email` with context.
- ❌ `/admin/users/list`: does _not_ show emails, does log `check email` without context. Reloads list of users.
- ❌ `/u/{username}/preferences`: does _not_ show email, does _not_ log `check email`. Reloads entire page (including header).

[Next page](https://meta.discourse.org/t/moderator-email-viewing-rights-changed/105187.md?page=2)
