backdrop-ops / backdropcms.org

Issue tracker for the BackdropCMS.org website
https://backdropcms.org
25 stars 19 forks source link

Remove the ability for Anonymous users to create Supporter nodes #1019

Open yorkshire-pudding opened 10 months ago

yorkshire-pudding commented 10 months ago

This is causing a lot of spam and I'm not aware of any valid reason for allowing anonymous users to create supporter nodes. Any objections?

olafgrabienski commented 10 months ago

No objections, quite the contrary. I think, one problem is that the path node/add (often used by spammers) redirects to the Create Supporter form.

bugfolder commented 10 months ago

I've turned off "Supporter: Create new content" permission on the site for anonymous visitors (so node/add now returns a 403).

But this did raise the question in my mind: how do authenticated users (i.e., people we might want to create Supporter nodes) find this capability, and/or find our list of Supporters?

The list is here: https://backdropcms.org/support/supporters. A few suggestions on this page (which i'm happy to add if others agree):

Where do we link that page from? It's not in the menus, and it's not linked from the "Ways to Contribute" page https://backdropcms.org/contribute, where I would have expected to find it.

yorkshire-pudding commented 10 months ago

I think there are some spam ones in there as well that aren't completely obvious but that go to sites that aren't real. For example: https://backdropcms.org/node/2087

I imagine a large proportion of the anonymous created ones are spam, but there also some created by users where that user has since been removed.

Removing the spam would get it down to 1 page.

Where do we link that page from? It's not in the menus, and it's not linked from the "Ways to Contribute" page https://backdropcms.org/contribute, where I would have expected to find it.

There is a block towards the bottom of the front page

yorkshire-pudding commented 7 months ago

@bugfolder - can we close this issue now?

bugfolder commented 7 months ago

@bugfolder - can we close this issue now?

It would be great to get some feedback on the suggestions above (which I'm willing to implement if there's support).

yorkshire-pudding commented 7 months ago
  • Add some words to the header explaining what "being a supporter" means
  • Add a link to "add your own entry"
  • Since there's only one and a bit pages, expand the pager settings to show all on one page, rather than making visitors use the pager to see the last three rows.

Yes - I agree with all the above.

bugfolder commented 7 months ago

Great. Since the majority of all opinions expressed over the last several months seem to be in line 😉, I'll make these changes (shortly) and then close the issue.