Alexey - Big Issue With Messenger - Urgent
Alexey - I just recently found out that users can edit ANYONE's messages to make them say what they want. I was alerted to this in a group chat where a Standard member edited MY message to say something different.
PLEASE tell me there is a way to fix this. This can be extremely dangerous and can be used against someone.
-
😨
-
😱😱😱😱😱
-
Chris, what account level have these users?
I could not reproduce this mesage editing by other users expect admins
- tested with standard, standard premium and customized levels
-
Hello Chris,
Standard member can edit messages in Talks only in case if the talk was created by the member. Talk's creator is owner of the talk and can edit participants list and their messages' content. Also if the message was edited then members may see when and who edited it in history.
-
Hi, i just tested this issue and i confirmed the same. This can be a huge problem.
-
It shouldn't matter who created the Talk, users should only be able to edit their own messages if nothing else.
Imagine I created a talk with you and Baloo. I edit your messages to make it look like you are threatening to kill me and my family, take screenshots of it, send it to the police as proof.
It's a bit extreme but, the problem is.. it's possible to do.
-
Chris, you really believe in the good of men ;) ... but you are right. I did not see this editing-problem under that point of view.
-
Chris as I mentioned every talk's participant can see that someone corrected/edited a message (username and time) and this person who edited the message will be under suspicion and content of the message. This ability maybe useful in case if someone in your talk write bad content and you don't want to delete the whole message, but you may edit it and remove only some part of it.
BTW: You can edit html code of the page without any special rights, you just need to open developer tool and edit and then make screenshot for police.
Anyway, we will add ability to disable edit option for talks' owners or connect it with membership levels.
-
Hey Alexey - I can see where this may be useful but also could potentially be bad as well. I know my scenario above was a bit extreme nor do I think any of my members would do that.
I do think it would be best to connect to the membership levels just in case. For example, all users in talks should be able to edit their own messages. Maybe Talk owners can delete the messages. But the 'Edit All' feature should be left for Admins and Moderators. Just my opinion
-
The correct way is to give right to anyone edit/delete their own messages.
And moderator/administrator to edit/delete all by logging.
-
On the one hand, yes Cem, that makes sense. Only the messenger allows any member to create a grouped conversation, and from there, it is logical that he himself moderates the discussion he initiated himself.
So you can tell your members, you are solely responsible for the discussions you create ... -
-
Thank you!
-
Hey Alexey, just an option please, me this current way of working suits me very well.
-
Baloo, Ok.
-
Special thanks to you Alexey, you always try to please everyone and always with a smile :-) And what's more, you do it with talent!
-
I think Cem's suggestion above is the best.
-
I agree Mark
-
Thank you :)