Moderators Viewing Email Addresses

[Martin_Cash]

Just FYI,

I know this has already been discussed a few times. Not to beat a dead horse, but my use case is…

I have to be PCI compliant and giving non-employees the ability to view/export email addresses is a security problem that restricts me from adding moderators. I’d like to use this feature so mods can see reports and such, but viewing email addresses is a no-go for me for me.

Remove moderator ability to view users email addresses

There were some excellent changes to mod permissions as per this topic Permission Changes (moderators have less). I feel removing the ability for mods to view email addresses should be considered too. There are several reasons for this: Data Protection - In the UK there are laws governing digital personal data and I feel that there isn’t sufficient reason to let moderators (who are usually unpaid volunteers) view people’s personal email addresses (somebody in the thread mentioned it helps with…

Moderators can view emails and export user lists

This is… insane. In any forum, moderators can see the emails of users and even less the possibility of exporting them and downloading them to a csv file. This is a huge security hole. While promoting someone as a moderator means that you have confidence in that person, but it is crazy to think that that person can have access to a list of users with data and even that you can download them.

[HAWK]

Do your mods perform tasks that TL4s couldn’t execute?

[Martin_Cash]

Thanks, @HAWK, really it’s not that big of a deal for me. It would be nice to allow them to view reports to monitor the health/growth of the community.

Also congratulations. I read over on FeverBee that you’ve taken on a new role at Discourse. I’m sure Jeff and team are glad to have you on board.

[HAWK]

It would be nice to allow them to view reports to monitor the health/growth of the community.

For sure – I think it’s really impt that they have visibility of that stuff. It ensures that everyone buys into your growth strategy and has a degree of accountability as part of the team. That said, you can export reports without including email addresses. What reports do you regularly generate.

Also congratulations. I read over on FeverBee that you’ve taken on a new role at Discourse. I’m sure Jeff and team are glad to have you on board.

Thanks! Yup, this is day 2. So far so good – I’ve been on my very best behaviour.

[codinghorror (Jeff Atwood)]

Yeah I would recommend TL4 for this, then document what pain points they have as mini-mods with TL4?