Guinea Pigs Required

I have pm’d my email, so tomorrow could be confusing for me.

1 Like

It’s only a trial but we’re here to help :lou_lol:

1 Like

More information on the trust levels in Discourse can be found here. As you’ll see there is a bit of science behind the concept.

User trust levels are a way of…

Sandboxing new users in your community so that they cannot accidentally (or intentionally!) hurt themselves, the forum, or other users while they are learning what to do.

Granting experienced users more rights so that they can help maintain and moderate the community they generously contribute so much of their time to.

As documented in Community Building on the Web 1.0k, there is a progression from…

Visitor → Novice → Regular → Leader → Elder

These five levels seemed like a great starting point for our user trust system, though we changed a few names to make the levels more clear.

Thus, Discourse offers five user trust levels , and your current level is visible on your user page:

0 (New) → 1 (Basic) → 2 (Member) → 3 (Regular) → 4 (Leader)

(Yes, we intend for you to be able to rename the levels, though this is not quite supported yet. If you gotta have level 4 be Ninja and level 3 be Pirate, so be it!)

New (0)

Discourse does not quite trust new users yet, as they are visitors who just created an account, still learning the community norms and the way your forum works. Whether accidentally, or intentionally, new users can cause problems in your community.

We also want to hide any so-called “advanced” functionality from new users to make the UI less confusing for them and gently land them on the deeper UI as they get more experienced.

Thus, new users’ abilities are restricted for safety – both theirs and yours.

Users at trust level 0 cannot

  • Send private messages to other users
  • “Reply as new topic” via Link button (UI removed)
  • Flag posts
  • Post more than 1 image
  • Post any attachments
  • Post more than 2 hyperlinks in a post
  • Have actual links in the ‘about me’ field of their profile (will be silently and temporarily converted to plain text)
  • Mention more than 2 users in a post

Admins can change these limitations in…

  • newuser_max_mentions_per_post
  • newuser_max_links
  • newuser_max_images
  • newuser_max_attachments

Basic (1)

If a user sticks around long enough to read a bit, Discourse now trusts them as a basic user.

They can get to trust level 1 by…

  • entering at least 5 topics
  • reading at least 30 posts
  • spend a total of 10 minutes reading posts

Admins can change these thresholds in…

  • basic_requires_topic_entered
  • basic_requires_read_posts
  • basic_requires_time_spent_mins

Users at trust level 1 can

use all core Discourse functions

  • Upload images and attachments if enabled
  • Edit wiki posts
  • Flag posts

have all new user restrictions removed

Members (2)

Members keep coming back to the site, and have participated long enough to earn complete citizenship.

They can get to trust level 2 by…

  • visiting at least 15 days, not sequentially
  • casting at least 1 like
  • receiving at least 1 like
  • replying to at least 3 different topics
  • entering at least 20 topics
  • reading at least 100 posts
  • spend a total of 60 minutes reading posts

Admins can change these thresholds in…

  • regular_requires_topics_entered
  • regular_requires_read_posts
  • regular_requires_time_spent_mins
  • regular_requires_days_visited
  • regular_requires_likes_received
  • regular_requires_likes_given
  • regular_requires_topic_reply_count

Users at trust level 2 can

  • Use the “Invite others to this topic” button for one-click onboarding of new users to participate in topics
  • Invite outside users to PMs making a group PM
  • Daily like limit increased by 1.5 ×

Regular (3)

Regulars are the most active readers and reliable contributors over long periods of time.

They can get to trust level 3 by…

This is time and activity based, unlike the previous levels. In the last 100 days…

  • must have visited at least 50% of days
  • must have replied to at least 10 different topics
  • of topics created in the last 100 days, must have viewed 25% (capped at 500)
  • of posts created in the last 100 days, must have read 25% (capped at 20k)
  • must have received 20 likes, and given 30 likes.*
  • must not have received more than 5 spam or offensive flags (with unique posts and unique users for each, confirmed by a moderator)
  • must not have been suspended

* These likes must be across a minimum number of different users (1/5 the number), across a minimum number of different days (1/4 the number). Likes cannot be from PMs.

All of these must be true.

Unlike other trust levels, you can lose trust level 3 status. If you dip below these requirements, whether from flagging or the passage of time, you will be demoted to Member. However, in order to avoid constant promotion/demotion situations, there is a 2-week grace period immediately after gaining Trust Level 3 during which you will not be demoted.

Admins can change these thresholds in…

  • leader_requires_days_visited
  • leader_requires_topics_replied_to
  • leader_requires_topics_viewed
  • leader_requires_posts_read
  • leader_requires_max_flagged
  • leader_promotion_min_duration (grace period)

Users at trust level 3 can

  • recategorize and rename topics
  • access a private “frequent flier’s lounge” category only visible to users at trust level 3 and higher
  • have all their links followed (we remove automatic nofollow 1.6k)
  • spam flags cast on TL0 user posts immediately hide the post
  • flags cast on TL0 user posts in sufficient diversity will auto-silence the user and hide all their posts
  • make their own posts wiki (that is, editable by any TL1+ users)
  • Daily like limit increased by 2 ×

Leader (4)

Leaders are regulars who have been around forever and seen everything. They set a positive example for the community through their actions and their posts. If you need advice, these are the folks you turn to first.

They can get to trust level 4 by…

Manual promotion only at the moment!

In the future, look closely at quality?

 ExplicitQuality = min(1.0,
      contributionValue(LikesRecievedCnt) * LikesWeight +
      contributionValue(BookmarksRecievedCnt) * BookmarksWeight +
      contributionValue(FavoritesRecievedCnt) * FavoritesWeight +
      contributionValue(RepliesCnt) * RepliesWeight +
     contributionValue(AvgTopicRepliesCnt) * TopicRepliesWeight)

Look also at site and topic promotion: invites, accepted invites, external links followed?

Election process?

Users at trust level 4 can

  • edit all posts
  • pin/unpin topic
  • close topic
  • archive topic
  • make topic unlisted
  • Split and merge topics
  • Daily like limit increased by 3 ×

:lou_facepalm_2:

Still bloody much on impossible for non geeks to select txt to highlight on a phone though.

GDPR and marketing tell ya what just send all your assets to the EU now and save legal fees

No, it’s about the management of personal in formation, how it’s held and what it is used for - anyway a weekly update to those who don’t or rarely post is marketing isn’t it? So I guess there are two things to check 1) is the personal info held caught by GDPR and 2) do you need to ask everyone to opt in to receiving emails.

I’m no GDPR expert though.

GDPR

considering that we the users signed up for the “service” provided by the forum, then the forum can claim to have a legitimate business interest in processing your data including keeping you abreast of updates to the site / threads.

they will need a privacy policy though

1 Like

Great work belch. Obviously I can’t be arsed to read past the first line or so of each post but I am sure it is all fine.

When can we (the soviet) start charging fivers?

I take it the Soviet will be level 4 users in order to get the necessary powers. Bletch has implied that there will be an election process to get to L4.

I understand that pap is already in discussions with Cambridge Analyticia.

2 Likes

Well, we had a long Soviet discussion about ways to develop the site and get more than 6 people posting per day. I suggested papxit, everyone agreed this would help retain posters but not get new ones. Bob wanted porn, bear 2nd it bit the welsh one insisted on sheep. As it is lambing season bletch got cold feet and said no porn at all. Bear flounced off for a month causing bletch to go rogue. He decided the best way to get more users is to implement a highly technical posting system then spend 10,000 words explaining it to us all.

I still thing a papxit porn combo would have been better.

2 Likes

OK, I should have been a bit more specific, that point that your are asking about emails and that specific part of GDPR seems to only apply to marketing emails.

However you have to specifically ask userrs if they want to opt in to emails, you can’t just assume they have given consent just because they have signed up to your service.

Gone are the days when the opt-in checkbox is ticked by default, it has to be unticked and the person has to physically tick it.

Now don’t get me started on obfuscation of data in non-live systems.

As @dubai_phil has alluded to, GDPR is a license to print money for the EU. Oh and don’t forget it also applies to non-electronic data…

That’s a general phone and fat finger issue believe me. I could be considered a geek but I hate selecting text on my phone!!

1 Like

GDPR. I’ve known all about that stuff for about 3 years. Equally I’m totally aware how nobody is actually ready for it!

Even the EU Data teams are now indicating they may not fine everyone who is in breach as EU Industry would collapse. It affects anyone who has anything stored on an EU citizen (and a Brit post Brexit)

It is front and centre in my life at the moment as we work to release our change the world software and app shit globally. All our geeks were “meh we are too small” “it is for marketing emails”

Now they are all “we hate you Phil” “Why didn’t you mention this a year ago” (I did)

HOW MUCH?? for the Compliance Audit…

Basically Facebook would be dust by now IF it had been passed 25th May. As it is they will be battered and bleeding by the time Data Protection Act stuff has been filed against them.

In fact GDPR is what got me to the Semi! I need to engage EU lawyers (sales contracts) and so have to do that before we launch globally so needed to b e done this month so do it in Poland it is cheaper, then RyanAir in for the match.

Simples 56 quid return for a weekend of footie, Grandkids and Mum time.

Gotta love the EU

Back to the testing shit.

It is AWESOME. It is now SO easy to post Golf Pictures.

I do however have an ambulance chaser working on an RSI claim for overscrolling

There is ONE issue that the techies will need to resolve.

The automated emails (ie signing up stuff) is automatically interpreted as Spam by Yahoo Mail - may be the same on other platforms.

You can do some funky certifiable stuff to resolve that I think??

I mean who ever reads their Spam ?

Point of order Roy Chubby-Round, Bletch implied nothing of the sort.

As I’ve said, we’re just looking at this at the moment and no decision has been made.

BUT, I would envisage that the owners would be Admin level 4 users and that the Soviet (Am I really typing this knowing that @bearsy and @tokyo-saint are on the Soviet) would be ‘Normal’ users at level 4.

This would mean that for all structural and behind the scenes running of the site only the owners would be able to make changes but for general admin duties The Soviet would be able to do that - as well as other posters who had reached level 3 or above.

It actually begs the question of whether, in a Discourse world, you would hold elections to the Soviet or whether you would instead let the community create Soviets by just promoting them to level 4.

So, two issues here.

At the moment emails are coming from a testing domain (@sotonians.zeitgeistmarys.com) and as no email systems worldwide have ever seen email from that domain, the email whitelist/blacklist heuristics will put it in Spam by default for many email providers.

As more and more people move their email from SPAM to Inbox, so the whitelist heuristics will start to identify it as harmless.

However, IF we were to move to Discourse, then the emails would come from @sotonians.com and that would almost certainly go straight to Inbox.

If they didn’t, then I would imagine* that you can tell yahoo email** to treat @sotonians as non-spam.

*guessing

**who uses yahoo.com for their email nowadays - it’s the tech equivalent of writing with a quill.

There is a discussion on Discourse and GDPR here…

Here’s the OP…

GDPR that will be effective in EU by 28/5/2018 requires more careful handling of personal data. As I’ve analyzed needed changes in our software I’ve found following:

We need explicit consent by user to gather personal data (username, ip addresses) - I think that registration in forum can be taken as explicit consent

We need to handle them any personal data per request, so is there any convenient way to export the data we are collecting about the user? I mean are there any data not currently visible to the user in his profile? I can only think of IP addresses.

We need to delete the data per request - this could be easilly done be removing all post, removing user or anonymizing user.

Are you EU providers preparing for this new policy somehow?

Level 4 mother fuckers, you read it here first. I made it to curry night!

You do realise that The Soviet position is renewed annually, don’t you?

…and that IF we move to Discourse, we’ll be sure to do it 366 days after the last Soviet elections.

Woo hoo! another win

It is actually possible to copy text on the new supersite

And appoint your Data Processor and Data Controller.
You will actually have the same rabbit hole that I am falling down.
We have an SaaS solution. It links lots of tech including Mobile & Communications. Our IP does funky shit on the cloud.
We sell that SaaS to companies that then interact with their clients.
Exactly like Sotonians - you have “us” and our stuff is then stored by you on someone else’s servers.
Soooooooooo
I need an army of legal beagles to write the correct contracts - as technically would you.
IF your cloud provider is compromised and data is abused, your asses have to be covered legally and vice versa.
Which is why I am meeting experts next week to begining to make sense of how much that will all cost
And next trick is to see if copy and paste now works from here easily