search

e621ng / e621ng

e621.net
Other
288 stars 60 forks source link

Enable ticket API #657

Closed clragon closed 2 months ago

clragon commented 3 months ago

Is your feature request related to a problem? Please describe. Using third party tooling to manage tickets as part of moderation efforts is difficult because the ticket API is not enabled.

Describe the solution you'd like Enable the ticket JSON API endpoint.

Describe alternatives you've considered N/A

Additional context image

DonovanDMC commented 3 months ago

I can bang out a pr for this if neither of you want to do it This could be immensely easier if tickets were only visible to their creator and moderators

clragon commented 3 months ago

that'd be very kind

Sindrake commented 3 months ago

This had been suggested before. I believe, the concerns around it revolved around security. Malicious users mass-grabbing everything to look for compromising information, or maybe automatically checking if their comments or posts were reported.

I don't know if I share this concern, but it's definitely something to consider here. Making all tickets private like @DonovanDMC suggested would solve this issue, but it would make the system a lot more opaque to users. Then again, I don't know how much we care about transparency these days.

DonovanDMC commented 3 months ago

This had been suggested before. I believe, the concerns around it revolved around security. Malicious users mass-grabbing everything to look for compromising information, or maybe automatically checking if their comments or posts were reported.

I don't know if I share this concern, but it's definitely something to consider here. Making all tickets private like @DonovanDMC suggested would solve this issue, but it would make the system a lot more opaque to users. Then again, I don't know how much we care about transparency these days.

After seeing the people we have stalking tickets, and pulling out tickets to harass other users (prime example: https://discord.com/channels/431908090883997698/432280999293091872/1253870984256290876), I am a firm believer in putting heavier restrictions on ticket viewing At bare minimum we can probably make json only work for Moderator+, not in a conventional manner but I'm sure it's possibe