For general Groups.io questions, please see the Group Managers Forum and Group_Help groups. Note: those groups are volunteer-led and are not officially run by Groups.io.
|
moderated
Re: Add DisplayName in the "joined" notification
#suggestion
This is a feature that I would wholly support. During the initiation of a new group of now over 100 members, about 75% did not add a ‘Display Name.’ I had to send out an addendum notice to tell them they should do that, and guide them on how to do that. This was even with a caution/note added to the Invitation that it was the group insistence that everyone be readily recognizable and no one be ‘Oldhoseroller’ et.al.
‘Forcing’ a Display Name’ to be entered during the sign-on would be helpful.
Thanks,
Dan Tucker, Groups.io AFDRetiree’s Group Founder/Owner/Moderator
From: "main@beta.groups.io" <main@beta.groups.io> on behalf of "Christos G. Psarras" <christos@...>
Hi Mark, It can be useful in certain situations if DisplayName is added in the mod joined notification text, i.e.
or alternatively,
Even without the bracketing it would help catch if someone (user or mod) forgot to add a DisplayName on the profile (when this is a group policy), and especially when working with a multi-mod group in such group.
|
|
|
|
I would ask those members to reapply with the new email address. Or you csn simply add the new email address. If necessary, you can merge their old topics once they start posting.
toggle quoted messageShow quoted text
There is no limit to the number of things that technically challenged members/account holders might want or ask for help with. Some things they are best learning to go on their own. You csn walk them through it. You can create your own group’s personal help wiki pages or sticky posts. I remember being shocked when the “change member email” feature was implemented, at how much power it gave me as an owner, and at the realization that I had to treat it respectfully, and the subtle simultaneous realization that other group owners might not. It just feels wrong.
On Feb 3, 2021, at 10:57 AM, Robert Oshel <robert.oshel@...> wrote:
-- J Messages are the sole opinion of the author, especially the fishy ones.
|
|
|
|
Robert Oshel
How about allowing a moderator to change someone's email address only for that group, and the change does not go into effect until after the person is notified by email to the old address that the moderator is attempting to change his or her email address for the group and the person clicks an "I approve" option in the mail? I have some technologically challenged members who have asked me to change their address. Bob
On Wed, Feb 3, 2021 at 11:55 AM Mark Fletcher <markf@corp.groups.io> wrote:
|
|
|
|
moderated
Re: Disallow concurrent "special notices" and "following only"
#suggestion
#bug
Where’s the “hit self over the head” option?
toggle quoted messageShow quoted text
On Feb 3, 2021, at 10:46 AM, Christos G. Psarras <christos@...> wrote:
-- J Messages are the sole opinion of the author, especially the fishy ones.
|
|
|
|
moderated
Re: Disallow concurrent "special notices" and "following only"
#suggestion
#bug
>>> I forgot to send it as a Special Notice.
Ohh, I have a graphic for that too:  (jk, sorry, I guess I'll just walk myself back to the [on-topic] crate) ;-) Cheers, Christos
|
|
|
|
On 3 Feb 2021 at 10:35, J_Catlady wrote:
Exactly, what Peter says. it's risk vs benefit. Huge risk, negligibleHaving just had my personal information publicly revealed on a hacked forum I would agree. Nobody but the member himself should be able to change email addresses. Dave http://davesergeant.com
|
|
|
|
Exactly, what Peter says. it’s risk vs benefit. Huge risk, negligible benefit. Not to mention: the opportunity cost of implementing more worthwhile things.
toggle quoted messageShow quoted text
On Feb 3, 2021, at 10:32 AM, Peter Cook <peterscottcook@...> wrote:
-- J Messages are the sole opinion of the author, especially the fishy ones.
|
|
|
|
I agree that Shal’s idea takes us in the right direction. But still not far enough. I’d get rid of it entirely.
toggle quoted messageShow quoted text
On Feb 3, 2021, at 10:29 AM, Shal Farley <shals2nd@...> wrote:
-- J Messages are the sole opinion of the author, especially the fishy ones.
|
|
|
|
On Wed, Feb 3, 2021 at 01:22 PM, J_Catlady wrote:
Suppose I don’t like somebody in my group and I want access to all their subscriptions to do bad things. All I’d have to go is change the email address of their whole account.I agree with J - I just don't think the risk outweighs the benefit to the users. Maybe I'm missing some key point about the value of this capability? Pete
|
|
|
|
Mark, Should I make other changes? Should the change only affect that one subscription? That is, if someone is subscribed to 2 groups, and the moderator of one of those groups changes that person's email address, should I then create a new Groups.io account, splitting off that one subscription? I would disable the ability to change the address if the member is even a member of any other groups. That's because the other groups may have sensitive information in their content to which the baddie should not gain access. Or, make it apply to this group only. But that will be fraught with details when the new address is already an account or an alias of an account. It may be worth delving into those details if it heads us in the direction of making it possible for the member to split their account, and/or move subscriptions between accounts (having somehow authenticated ownership of both). Shal
|
|
|
|
Actually since your fix, they can’t do it to me. So I csn see this leading to people artificially making themselves group owners in order to benefit from the enhanced security protection .
toggle quoted messageShow quoted text
On Feb 3, 2021, at 10:22 AM, J_Catlady via groups.io <j.olivia.catlady@...> wrote:
--
J Messages are the sole opinion of the author, especially the fishy ones.
|
|
|
|
This is a really good observation and I think the security risk applies not just to mods of groups. Suppose I don’t like somebody in my group and I want access to all their subscriptions to do bad things. All I’d have to go is change the email address of their whole account.
toggle quoted messageShow quoted text
I’ve always felt queasy about the ability of a group owner to change the account address of anyone at all. That piece of data belongs at a higher level than the individual group. As a member of several premium groups, I’m wondering now whether group owners might do this to me. Prior to this I’d only thought about it as a group owner. I’d push for eliminating this ability entirely.
On Feb 3, 2021, at 8:55 AM, Mark Fletcher <markf@corp.groups.io> wrote:
--
J Messages are the sole opinion of the author, especially the fishy ones.
|
|
|
|
On Wed, Feb 3, 2021 at 11:55 AM, Mark Fletcher wrote:
Mark -- Thanks. This has bothered me for awhile now. Correct me if I'm mistaken, but I think the most common scenario behind the existing feature is when someone simply gets a new email address, leaving the old one inactive. In such a case, the current behavior -- having the change occur account-wide -- strikes me desirable. If the account was to be split into two, it raises the question of how to subsequently merge them...especially if the previous address is no longer accessible. Generally, it seems to me that if an account holder is struggling to change his own address, he isn't going to be any more adept at merging them. A third option (which probably won't be popular but I'd like to throw out for consideration) is the elimination of this feature altogether. As group Owners, we cannot edit a subscriber's profile, but we can change their login credentials? That combo has never quite added up to me. Regards, Bruce
|
|
|
|
moderated
Add DisplayName in the "joined" notification
#suggestion
Hi Mark, It can be useful in certain situations if DisplayName is added
in the mod joined notification text, i.e. This is to notify you that DisplayName ...@... has joined your group...or alternatively, This is to notify you that ...@... (DisplayName) or [DisplayName] has joined your group...Even without the bracketing it would help catch if someone (user or mod) forgot to add a DisplayName on the profile (when this is a group policy), and especially when working with a multi-mod group in such group. Thanks and Cheers, Christos
|
|
|
|
On Wed, Feb 3, 2021 at 04:55 PM, Mark Fletcher wrote:
Is that an owner or mod of a main group only or does it include mods of subgroups which may be just members in a main group? Along with the power to change someone's email address come the responsibility to use it wisely. I always get confirmation from the member in question that they understand that a change to their account address impacts all groups they are subscribed to. Unless I get that confirmation, I don't make the change. It can be lot less time and effort being able to make the change on behalf of someone than it is to recover the situation after their failed attempts. It accounts are split based upon subscription I think that will generate confusion for some older members who will login with the wrong account for the group they want to interact with and wonder why they cannot access it. Those are frequent questions on GMF. Regards Andy
|
|
|
|
moderated
Re: Add the User Name in the "joined" notification
#suggestion
Oh, you're right Andy, thanks for pointing that out! I
guess I'll create a new corrected submission. Cheers,
Christos
|
|
|
|
On Wed, Feb 3, 2021 at 10:55 AM, Mark Fletcher wrote:
Should the change only affect that one subscription? That is, if someone is subscribed to 2 groups, and the moderator of one of those groups changes that person's email address, should I then create a new Groups.io account, splitting off that one subscription?If you continue to allow email addresses to be changed, then I'd certainly prefer that it only effect one group. Duane
|
|
|
|
Mark, I think I've said this in the past so I may be repeating myself.
I do not think I should have the ability to change anyone else's email address globally, if at all. I consider it just too much of a security risk. Members can do it themselves quite easily (I've provided folks with instructions a number of times). If they can't do it because they no longer have access to an email account, that's their issue to fix, not mine. $.02, Pete
|
|
|
|
Hi All, Premium group owners have the ability to change the email addresses of their members. The email address is changed on the member's Groups.io account, so affects all their subscriptions. As was pointed out to me privately, this presents a security issue. If a member is an owner of another group, this feature provides the ability for a nefarious group owner to take over that other group, by changing the email address of the member to a new email address controlled by the baddie. I have changed the feature so that you cannot change the email address of a member who is a moderator or owner of a group. Should I make other changes? Should the change only affect that one subscription? That is, if someone is subscribed to 2 groups, and the moderator of one of those groups changes that person's email address, should I then create a new Groups.io account, splitting off that one subscription? Thanks,
|
|
|
|
moderated
Re: Add the User Name in the "joined" notification
#suggestion
On Wed, Feb 3, 2021 at 05:45 AM, Christos G. Psarras wrote:
Even without the parentheses it would help catch if someone forgot to add a username on their profile, especially when working with a multi-mod group.Do you mean Display Name given that the username field on a profile is not currently used by Groups.io? Andy
|
|
|