# Thoughts about impersonate user

**URL:** https://meta.discourse.org/t/thoughts-about-impersonate-user/258795
**Category:** Community Building
**Tags:** impersonate
**Created:** [March 20, 2023, 7:54pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795 "2023-03-20T19:54:52Z")
**Posts on this page:** 9
**Page:** 5

<div class="post-metadata">

### Author: ![satonotdead](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/satonotdead/32/447830_2.png) [@satonotdead](https://meta.discourse.org/u/satonotdead)
#### Post date: [March 24, 2023, 1:28pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/88 "2023-03-24T13:28:06Z")

</div>

> [@sam](#):
>
> So much drama on this topic.

I’m agree with you said, but I suspect that ‘little’ drama could be good because people are understanding what manage and/or protect personal or third party data means to be (there are social responsibilities involved).

Thanks to listen, I can confirm we chose Discourse very well for our project. And of course, I fully appreciate your PR 👌

---

<div class="post-metadata">

### Author: ![merefield](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/merefield/32/176214_2.png) [@merefield](https://meta.discourse.org/u/merefield)
#### Post date: [March 24, 2023, 1:49pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/89 "2023-03-24T13:49:50Z")

</div>

I think we’ll need to restrict access to that `allow_allow_impersonation` setting, it’s too powerful! Perhaps another setting? 🤣

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [March 24, 2023, 1:59pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/90 "2023-03-24T13:59:37Z")

</div>

The one Plugin Ring to rule them all!

Too bad Procourse Installer didn’t get supported better.

---

<div class="post-metadata">

### Author: ![kynic](https://avatars.discourse-cdn.com/v4/letter/k/b487fb/32.png) [@kynic](https://meta.discourse.org/u/kynic)
#### Post date: [March 24, 2023, 2:12pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/92 "2023-03-24T14:12:15Z")

</div>

No no, it should be in the console or in the source code at least, it’s so tempting to allow this setting and use it. wait but I can access the console too. 😂

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [March 24, 2023, 2:14pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/93 "2023-03-24T14:14:56Z")

</div>

Just to note, that not all admins will have access to the console.

I suppose the idea is very similar to not allowing admins in general the ability to impersonate system or Discobot.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 24, 2023, 2:16pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/94 "2023-03-24T14:16:57Z")

</div>

Just yesterday I needed to impersonate a user to find a bug that affected just that user (that had an invalid time zone in the profile).

If you don’t trust your admins, impersonating users is the least of your worries.

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [March 24, 2023, 2:27pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/95 "2023-03-24T14:27:16Z")

</div>

As mentioned though having the option to restrict which admins have access is not a bad thing. But @sam has pushed a simple peace of mind fix for those wanting it. Which does not affect those whom like it the way it is.

Biggest problem in this discussion has been tunnel vision instead of seeing the pros and cons moving towards coming up with a Compromise that works for all. Sam’s PR fits imho the Op’s request implementing a layer if prefered.

---

<div class="post-metadata">

### Author: ![satonotdead](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/satonotdead/32/447830_2.png) [@satonotdead](https://meta.discourse.org/u/satonotdead)
#### Post date: [March 24, 2023, 2:31pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/96 "2023-03-24T14:31:23Z")

</div>

Please can staff close this topic?

**It’s getting with non-sense after a very simple and clear core solution without bad sides more than non-sense over there.**

Super-admin \> admin \> mods \> lvl 4 is a very good deal for communities, not for single devs.

> And single devs are not we was talking about 🙂

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [March 24, 2023, 2:34pm UTC](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795/97 "2023-03-24T14:34:25Z")

</div>



[Previous page](https://meta.discourse.org/t/thoughts-about-impersonate-user/258795.md?page=4)
