Usuário silenciado pode contornar a restrição entrando no modo anônimo

ted · Abril 23, 2025, 8:39am

Hello!

We just merged a fix that makes it so that while in anonymous mode, the owner account’s “silenced” status is respected here:

github.com/discourse/discourse

FIX: Delegate silenced_till from anonymous user to main user account

main ← fix/anonymous-silenced-users

opened 06:40AM - 23 Apr 25 UTC

Drenmi

+24 -0

### What is the problem? When a user is silenced they can, given they have th…e permissions, enter anonymous mode and keep posting, essentially bypassing the silence that way. ### How does this fix it? This change delegates the `silenced_till` attribute to the main user record if the user is anonymous. ### Trade-offs and alternative approaches Given anonymous posting is enabled, as of this change, each call to `silenced_till` will produce a minimal query to `anonymous_users` to select one record based on pkey. The alternative to this is to add logic to update the anonymous record's value when it is created and when a user is silenced or unsilenced. Given this choice of a theoretical minimal performance impact on a lukewarm path and a significantly more involved implementation, I chose the former.

Tópico		Respostas	Visualizações
Anonymous mode not working Bug anonymous-mode	7	716	9 de Agosto de 2020
Enable and configure anonymous mode Site Management how-to , anonymous-mode	0	7766	23 de Junho de 2020
Anonymous posting not available even when enabled Support anonymous-mode	7	2724	23 de Junho de 2020
Anonymous posting -- but retaining original user permissions Feature anonymous-mode	11	1802	2 de Dezembro de 2021
Anonymous posting for sensitive subjects Feature anonymous-mode	16	1955	13 de Junho de 2020

Usuário silenciado pode contornar a restrição entrando no modo anônimo

Tópicos relacionados