كيف تمكن مستخدم غير موظف من الهمس في موضوع عام؟

I’m not sure if this is actually a bug but I’m stumped. I was going to post this in Bug but changed my mind since I’m not certain if it would come up again and may be a feature/expected behavior that does not need fixing.

We had an inline post in a topic that really should have been a private message and was flagged as off-topic. Before dealing with the flag, I selected the post with the timeline wrench and moved it to a new private message, made sure both participants were invited, then marked the flag valid and “leave the post unchanged”. I also entered a regular post explaining a message was moved private and Staff-colored it.

After I returned to the topic, the OP of the thread had replied regarding the moved message that was now a PM, but the public reply was all in italics. I started the process to copy that text out since it had information that should also be moved to the PM, but while looking at it, I realized it had the eye symbol with a slash and was a whisper. Odd, didn’t know non-Staff could do that… I figured perhaps users could whisper but it wouldn’t be visible to them if they wanted to make an in-thread private comment to the moderators.

On research in the Admin console, it shows whisper ability can be granted to specific groups, but the only enabled group is Admin, and this member is not in that group.

My only guess is that this was a rare scenario caused by timing: My hypothesis the regular user was composing a long reply at the same time I was in process of moving the post to a PM, so when he replied in the public topic, Discourse converted it to a Staff whisper since the replied-to-message can no longer be seen.

The only thing is, he didn’t directly reply to the moved post; he replied to my Staff-colored response logging to the public why the post disappeared. That’s why I originally thought maybe general users can whisper to Staff only, but that doesn’t seem to be the case.

I don’t know if this needs fixing or is an actual reproducible bug, but was just curious if there’s some behavior that would allow a user not in a whisper-enabled group to whisper in-thread.

In the below screen snap, user DeusIrae is a TL_3 Regular and not in any groups enabled for whisper. He’s replying (“your comp game”) to the original respondent whose post was moved to PM but the reply is to me.

Maybe this is a failsafe for a public reply to a message that no longer exists?