{"action":"closed","issue":{"url":"https://api.github.com/repos/tootsuite/mastodon/issues/6986","repository_url":"https://api.github.com/repos/tootsuite/mastodon","labels_url":"https://api.github.com/repos/tootsuite/mastodon/issues/6986/labels{/name}","comments_url":"https://api.github.com/repos/tootsuite/mastodon/issues/6986/comments","events_url":"https://api.github.com/repos/tootsuite/mastodon/issues/6986/events","html_url":"https://github.com/tootsuite/mastodon/issues/6986","id":310311359,"number":6986,"title":"Prevent moderators from accessing private/direct toots that haven't been flagged","user":{"login":"ThibG","id":384364,"avatar_url":"https://avatars2.githubusercontent.com/u/384364?v=4","gravatar_id":"","url":"https://api.github.com/users/ThibG","html_url":"https://github.com/ThibG","followers_url":"https://api.github.com/users/ThibG/followers","following_url":"https://api.github.com/users/ThibG/following{/other_user}","gists_url":"https://api.github.com/users/ThibG/gists{/gist_id}","starred_url":"https://api.github.com/users/ThibG/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ThibG/subscriptions","organizations_url":"https://api.github.com/users/ThibG/orgs","repos_url":"https://api.github.com/users/ThibG/repos","events_url":"https://api.github.com/users/ThibG/events{/privacy}","received_events_url":"https://api.github.com/users/ThibG/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-04-01T09:39:36Z","updated_at":"2018-04-07T19:33:02Z","closed_at":"2018-04-07T19:33:02Z","author_association":"COLLABORATOR","body":"There have been much discussion recently about admins/moderators being able to read private/direct toots from the admin panels.\r\n\r\nThere are many issues with this feature, including:\r\n1. Moderators not knowing whether a toot is public/unlisted/private/direct (#6972)\r\n2. Moderators/admins seeing private/direct toots without opting in (if they should be able to access them at all, this should be an extra, conscious step)\r\n3. Moderators being able to access unflagged private/direct toot\r\n\r\nThis issue is about 3., which subsumes 2.\r\n\r\nI think it is an issue that admins can access unflagged private/direct messages. Offending messages can be flagged by users even if they are private or direct, and even if the recipient is on a remote instance since last release.\r\n\r\nThis change has already been implemented on a few instances, by merging the following commit: https://github.com/Aldarone/mastodon/commit/2700d4744d12749c2ef3d3dd174c16fe330ccc4d\r\n\r\n* * * *\r\n\r\n- [x] I searched or browsed the repo’s other issues to ensure this is not a duplicate.\r\n- [ ] This bug happens on a [tagged release](https://github.com/tootsuite/mastodon/releases) and not on `master` (If you're a user, don't worry about this).\r\n"}}
{"actor":{"display_login":"Gargron"}}