I guess one of the many plugins I already have installed is conflicting some way.
New in 1.2.0?
should probably be restricted to only admins, not global mods
also plugin breaking changes etc?
also... not on that list...
admins and global mods can read anyone's chat messages
Added to the list now. As mentioned, it is something that admins (or rather, those with database access, anyhow) are able to do already, it's mostly a change in terms of the level of effort to do so
That said, there seems to be a moderate amount of backlash for this feature, so we are investigating moving this out to another plugin.
"Don't be evil"
I'd go so far as to have an option to encrypt chats. Being able to read chats with less effort is not something we should strive for, it should be the opposite.
dmins and global mods can read anyone's chat messages
Not even sure why this would be thought of as a good idea? Users shouldn't expect that admin are going around trying to read their private conversations... If there are admins who abuse the database, then we shouldn't make it easier for them.
Conversely, as a forum administrator (moderator) I do not want my service being used as a conduit for nefarious actions. Being able to monitor all of the activity on a forum may be important to some. If I have it in my terms and conditions that all communications may be monitored I should have that opportunity. Now, if NodeBB moves to a full encrypted chat system I may have to consider turning off the chat feature.
NodeBB is not an email service, it is a forum software, and an expectation of privacy is not necessarily implied. For example, when I signed up here at community.nodebb.org I did not expect my chats to be private between myself and the recipient. I had a feeling that the administrators could read them and I am fine with that. Of course, if I were using a forum that confidentiality was at the utmost of importance than I can see how encrypted chats and posts may be important.
@rod Sounds like maybe it should be an option or a plugin then! Interesting to see the other side of things.
Conversely, as a forum administrator (moderator) I do not want my service being used as a conduit for nefarious actions. Being able to monitor all of the activity on a forum may be important to some.
Do you plan on monitoring every chat of your users to make sure no one is using your site for such nefarious actions? What have you been doing this whole time without this feature? Let's say a person wants to setup a site for abused women... Do you think they'd want to use NodeBB knowing that they can't speak in privacy to people who they trust? Communities are built on trust. Just make it a plugin and admins may choose it for their community if it is essential for their site's security.
Let's say a person wants to setup a site for abused women...
I did address that, I wrote "Of course, if I were using a forum that confidentiality was at the utmost of importance than I can see how encrypted chats and posts may be important" but I am not running such a site. I am running a gaming site.
And no I do not monitor all chats all of the time. Having the ability to do so is valuable though for me.
Like all things in life there are no simple answers. Trust is important but so is also running a safe site. I am not suggesting nor do I want the ability for everyone to read all chats just having the opportunity to moderate them is valuable. Obviously if NodeBB goes to a fully encrypted chat system my site may have to disable the chat function.
@rod That's why it's best to leave it as a plugin.
@julian I know this is an old thread but did this feature ever moved to a plugin?
there seems to be some harmful behavior in chats of some of my forum's users, so I need to give admins, means to monitor the chats if someone is suspicious of doing that.