I could use some help. I don’t know my head from my butt with SQL.
I am admining a board for my labor union. I’m an elected rep, but I’m not in leadership. The reason I’m admining it is because I have experience with discourse already, I set it up to modernize how we communicate internally (team collaboration), and I’m the only one at the moment (of 20 of us) who really has any clue how to do anything more advanced in a tech related behind the scenes capacity greater than using a web builder to build a website. Point is our group is end user tech savy, but not “behind the scenes.”
As this is a work space for all of us, including leadership, I’ve setup a couple categories for them to work in which I shouldn’t be able to snoop in. (call it above my pay grade).
Since there’s no real way to hide content from an admin, I created a theme component with CSS to:
- hide messages buttons in user profiles
- hide impersonate button in admin profiles
- hide topic preview of categories on categories page.
- hide the topic list within the categories from everyone.
- Then add visibility to the topic lists to members a (primary) group.
Bottom line, I’m creating a series of log and audit trails to be available should they wish to check that I’m not snooping.
- they can look and see in site logs if i ever touch that theme component (edit/disable) without them being aware, they can ask why and see detail
- if I ever used the impersonate or view message feature, that would be in the logs as well.
Basically, If I ever tamper with the CSS I wrote to hide this stuff they can see and ask me to explain myself.
- if I added myself to their group so the content is visible to me, in the group logs it shows me adding/removing myself in the logs.they can ask me to explain myself
What I need help with:
if I ever view the page with the css style-sheets disabled, I can see the URLs to the topics. Then obviously I can open the topics directly. What I want is a data explorer query they (executive team who all get admin access) can run from time to time that shows topics viewed within a category by any user not a member of the “executive” group.
They have no idea this can be done, but I want every base covered. I want to future proof this beyond me. As best as I can with the tools available.
So again, I need a data explorer query to do:
- if user is not part of group "executive"
- then display topics viewed by user(s) in category “EB” (or category id: 34)
This combined with the CSS white out I’ve applied creates enough of a paper trail that says if someone (me or anyone not on the executive team who may be given admin access in the future), has viewed topics within that category and they are not part of the executive team, they really have had to go out of their way and it’s intentional snooping.
Can anyone help with this?