# Ways to post confidential info for moderator eyes only?

**URL:** <https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482>\
**Category:** Feature\
**Created:** [2015年八月24日 22:27 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482 "2015-08-24T22:27:41Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)\
**Post date:** [2015年八月26日 22:52 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/21 "2015-08-26T22:52:14Z")

</div>

> [@lisajill](#):
>
> I beg of you to make “and author” optional. We very much need staff-staff comms.

The author of the _post_, not the _topic_. You kinda need to be able to see your own messages.

---

<div class="post-metadata">

**Author:** ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)\
**Post date:** [2015年八月26日 22:54 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/22 "2015-08-26T22:54:02Z")

</div>

> [@riking](#):
>
> The author of the post, not the topic. You kinda need to be able to see your own messages.

Oh! I’m having a moment of embarrassment I think. Got it, this is for the post, not the overall topic. Thank you.

---

<div class="post-metadata">

**Author:** ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)\
**Post date:** [2015年八月27日 07:16 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/23 "2015-08-27T07:16:31Z")

</div>

Would this also work for _topics_? If so, it would mostly solve [t](https://meta.discourse.org/t/new-category-permission-create-and-see/12053) [h](https://meta.discourse.org/t/create-permission/31679) [i](https://meta.discourse.org/t/using-discourse-as-a-community-ticket-system/20607) [s](https://meta.discourse.org/t/private-messages-to-a-group-or-other-means-to-handle-private-support-requests/14010).

---

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [2015年八月27日 09:50 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/24 "2015-08-27T09:50:51Z")

</div>

Nope, it will not work for topics.

---

<div class="post-metadata">

**Author:** ![mr8](https://avatars.discourse-cdn.com/v4/letter/m/f9ae1b/32.png) [@mr8](https://meta.discourse.org/u/mr8)\
**Post date:** [2015年八月27日 19:00 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/25 "2015-08-27T19:00:49Z")

</div>

#### Minimum trust\_level?

In addition to author and staff only, could we possibly have an option to specify the minimum trust\_level for a particular post when creating a whisper? e.g. trust\_level \>= 0 so the post is only visible to users that are logged in, or trust\_level \>= 4 since they’re almost like mods, and a ‘staff only’ option for very sensitive info.

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年八月27日 22:37 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/26 "2015-08-27T22:37:39Z")

</div>

No, not in scope for our initial go at this, maybe later.

---

<div class="post-metadata">

**Author:** ![AstonJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/astonj/32/215041_2.png) [@AstonJ](https://meta.discourse.org/u/AstonJ)\
**Post date:** [2015年八月28日 16:28 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/27 "2015-08-28T16:28:22Z")

</div>

Why not have a category setting which only allows user’s to see their own threads?

We have two such sections on my forums: Contact Admin and Contact a Moderator.

Create / Reply / See (All Threads)  
Create / Reply / See Own Threads

---

<div class="post-metadata">

**Author:** ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)\
**Post date:** [2015年八月28日 18:10 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/28 "2015-08-28T18:10:30Z")

</div>

> [@AstonJ](#):
>
> Why not have a category setting which only allows user’s to see their own threads?

This category already exists. It’s now called “Messaging”

Is there some reason that wouldn’t work for you?

---

<div class="post-metadata">

**Author:** ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)\
**Post date:** [2015年八月28日 20:24 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/29 "2015-08-28T20:24:15Z")

</div>

> [@Mittineague](#):
>
> Is there some reason that wouldn’t work for you?

Unfortunately it’s still not possible to send ~~private~~ messages to a group; only manually-defined lists of recipients are possible.

---

<div class="post-metadata">

**Author:** ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)\
**Post date:** [2015年八月28日 20:41 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/30 "2015-08-28T20:41:29Z")

</div>

Sure it is! I just did it. It auto-expands the group, but you can type the group name and it shows up in the auto-complete…

---

<div class="post-metadata">

**Author:** ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)\
**Post date:** [2015年八月28日 20:54 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/31 "2015-08-28T20:54:50Z")

</div>

> [@cpradio](#):
>
> Sure it is! I just did it.

Can you say more about how this is done? I’m unable to do what you describe (get any auto-complete or expansion) either here on meta or my own site.

---

<div class="post-metadata">

**Author:** ![cpradio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/cpradio/32/4970_2.png) [@cpradio](https://meta.discourse.org/u/cpradio)\
**Post date:** [2015年八月28日 20:59 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/32 "2015-08-28T20:59:14Z")

</div>

Go to Groups, create a group (or open an existing)  
Let all users reference the alias for said group  
Go to Profile \> Messages \> New Message  
Type group name in Add user field (without ‘@’, example: moderators)  
Click on popup or hit tab to expand it

---

<div class="post-metadata">

**Author:** ![AstonJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/astonj/32/215041_2.png) [@AstonJ](https://meta.discourse.org/u/AstonJ)\
**Post date:** [2015年八月28日 21:34 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/33 "2015-08-28T21:34:05Z")

</div>

- It’s not quite the same as you would need to include people manually.
- Also, once someone is included they will always be able to see it (it should really only be for ‘current’ mods)
- And I guess it’s not as organised/searchable as a section.

Having sections as I described works very well as an official means to get in touch with forum staff, it’s also the place where we move threads that are not permitted and leave an accompanying note.

---

<div class="post-metadata">

**Author:** ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)\
**Post date:** [2015年九月21日 15:17 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/34 "2015-09-21T15:17:44Z")

</div>

So, I just want to revisit this. This is something that is for the ‘staff’ group only? We want members of another group counted as the people seeing whispers (these are not moderators/admins - but staff of our company) while keeping other moderator actions unavailable. Is that the thing you said wasn’t possible/extremely difficult?

---

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [2015年九月21日 19:45 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/35 "2015-09-21T19:45:08Z")

</div>

It sounds like what you want in that case is group private messaging, as covered above.

---

<div class="post-metadata">

**Author:** ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)\
**Post date:** [2015年九月21日 19:57 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/36 "2015-09-21T19:57:53Z")

</div>

> [@codinghorror](#):
>
> It sounds like what you want in that case is group private messaging, as covered above.

What we are looking to reproduce is the ‘internal note’ system that Zendesk and other systems have. We’re interacting and leaving notes/drafts to be read by a large support team and potentially others in our company - these are notes that are **specific** to the thread and need to be in line and reviewable at any time in context.

The whisper feature sounds perfect except that we want to specify a group other than ‘staff’ as being tied to Discourse’s ‘staff’ group is very limiting and we don’t want to open up all of those features for everyone at our company.

---

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [2015年九月21日 20:45 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/37 "2015-09-21T20:45:02Z")

</div>

Maybe we can investigate a site setting for this

`whisper group id` or something like that.

Would that work for you? (not an easy change but doable)

---

<div class="post-metadata">

**Author:** ![lisajill](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lisajill/32/32289_2.png) [@lisajill](https://meta.discourse.org/u/lisajill)\
**Post date:** [2015年九月21日 20:50 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/38 "2015-09-21T20:50:20Z")

</div>

Yes, that would work. As an end user administrator ideally what I’d be able to do is go to site settings and change ‘Whisper group’ from ‘staff’ (I’d assume that would be default) to ‘new\_relic’ as it were.

---

<div class="post-metadata">

**Author:** ![Knagis](https://avatars.discourse-cdn.com/v4/letter/k/ba9def/32.png) [@Knagis](https://meta.discourse.org/u/Knagis)\
**Post date:** [2015年九月21日 21:25 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/39 "2015-09-21T21:25:13Z")

</div>

I have the same situation - we also have a separate group for staff that are not moderators but should be able to view the whisper notes.

---

<div class="post-metadata">

**Author:** ![AstonJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/astonj/32/215041_2.png) [@AstonJ](https://meta.discourse.org/u/AstonJ)\
**Post date:** [2015年九月21日 22:45 UTC](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482/40 "2015-09-21T22:45:57Z")

</div>

Why not go a little further and allow ‘group threads’ where users can choose who can (or who cannot) see and reply, along with a category setting which allows or disallows them. Mods and admin always see them (or not, if specified in the cat settings).

These could be used to organise meets, campaigns, competitions, or just for social purposes. Having them in categories make them easier to find and categorise.

They could also be used as a replacement for PMs - ideal for sites where PM abuse is systemic.

[上一頁](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482.md?page=1)

[下一頁](https://meta.discourse.org/t/ways-to-post-confidential-info-for-moderator-eyes-only/32482.md?page=3)
