Recently, I created a business account under the name "jroot", for testing permissions, and I came across a few things that disturbed me.
For starters, unlike my premium account's menu bar:
The regular user account did not have the "Members" list.
And when attempting to directly access this form via url, I was presented with the "You do not have permission to view this page or perform this action." error.
The ability to search for other members was not listed as something granted to premium+ only.
https://gyazo.com/95b878831db28fbae0c866d3f26da399
Nor should it be.
Every user deserves the right to search and find the member they wish to contact without having to dig through countless old threads they may or may not have posted on, trying to find them.
This is an essential permission for users to have. It makes business/communication on the site possible.
The only options on the menu bar should be ones usable by that member.
It's only logical.
(So either return permission to switch themes with it, or remove it?)
Currently, users have the ability to choose who can view certain details on their account...
That's fine, only there's this one option which removes all access, to everything...
Unchecking the box, or using the dropdown to switch the default "All Visitors" to "People You Follow Only" will disable normal users from viewing anything on your profile page.
Why is this a problem?
Because among the things this disables is the ability to look at past posts this user has made.
On a site where reputation is constantly under debate, and ratings mean nothing... The only sure fire way to get to know who you're dealing with is to read through posts they've made in the past, and determine what kind of user they are.
Members need to be held accountable for what they say.
Allowing them to disable users' permissions to view their past posts means they can make false scam reports on everyone they deal with, they can trash threads, they can make fake giveaways/auctions, they can farm ratings, or simply display their idiocy..... And the moment those threads hit the archives, they're in the clear from you digging it up and finding the truth.
Information like this should not, cannot be repressed.
It is vital to the security of the members of this site.
Menu bar
For starters, unlike my premium account's menu bar:
The regular user account did not have the "Members" list.
And when attempting to directly access this form via url, I was presented with the "You do not have permission to view this page or perform this action." error.
The ability to search for other members was not listed as something granted to premium+ only.
https://gyazo.com/95b878831db28fbae0c866d3f26da399
Nor should it be.
Every user deserves the right to search and find the member they wish to contact without having to dig through countless old threads they may or may not have posted on, trying to find them.
This is an essential permission for users to have. It makes business/communication on the site possible.
Lightbulb
I'd just like to take this moment and point out that the lightbulb on the far righthand corner of the premium menu bar redirects to the "You do not have permission to view this page or perform this action." page.
The only options on the menu bar should be ones usable by that member.
It's only logical.
(So either return permission to switch themes with it, or remove it?)
Profile Privacy
This issue is what I originally intended to verify by making another account... And is by far the biggest, for me, that I've listed.
Currently, users have the ability to choose who can view certain details on their account...
That's fine, only there's this one option which removes all access, to everything...
Unchecking the box, or using the dropdown to switch the default "All Visitors" to "People You Follow Only" will disable normal users from viewing anything on your profile page.
Why is this a problem?
Because among the things this disables is the ability to look at past posts this user has made.
On a site where reputation is constantly under debate, and ratings mean nothing... The only sure fire way to get to know who you're dealing with is to read through posts they've made in the past, and determine what kind of user they are.
Members need to be held accountable for what they say.
Allowing them to disable users' permissions to view their past posts means they can make false scam reports on everyone they deal with, they can trash threads, they can make fake giveaways/auctions, they can farm ratings, or simply display their idiocy..... And the moment those threads hit the archives, they're in the clear from you digging it up and finding the truth.
Information like this should not, cannot be repressed.
It is vital to the security of the members of this site.
- Type
- Suggestion
- Status
- Denied
Last edited:
