Admins have the option of adding people to a dispute tools thread in discourse. This is great, as it allows several admins to discuss a user's case. But right now a tools admin can add ANY user to the thread. Someone could accidentally add the wrong person and it might expose someone's personal information.
It would be great if ONLY tools admins could be added to threads generated from dispute tools.
Notes
We agreed on disabling this feature for dispute tools threads in Discourse, so we have control who access this information. Admins can still be added by assigned them to the Dispute in the Tools backend.
Dispute tools threads in Discourse have a custom field with the dispute_id they are related to, we can use this field to just disable this feature for the topics we want.
Tasks
[ ] Research how to remove this feature for certain PMs.
[ ] Disable invites to dispute tools threads in Discourse
Acceptance Criteria
Dispute tools threads should not allow users or admins to invite external users
Admins can still be invited to a dispute tools thread using the admin assignment in tools backend
Admins have the option of adding people to a dispute tools thread in discourse. This is great, as it allows several admins to discuss a user's case. But right now a tools admin can add ANY user to the thread. Someone could accidentally add the wrong person and it might expose someone's personal information.
It would be great if ONLY tools admins could be added to threads generated from dispute tools.
Notes
We agreed on disabling this feature for dispute tools threads in Discourse, so we have control who access this information. Admins can still be added by assigned them to the Dispute in the Tools backend.
Dispute tools threads in Discourse have a custom field with the
dispute_idthey are related to, we can use this field to just disable this feature for the topics we want.Tasks
Acceptance Criteria