search

jocosocial / swiftarr

The V3 Twitarr server and templated web interface.
MIT License
17 stars 9 forks source link

Shadow Performer Profiles should be Reportable #328

Open cohoe opened 3 days ago

cohoe commented 3 days ago

There seems to be no way to report someone's performer profile, either for bad content or for someone claiming/vandalizing a shadow event.

Somewhat related - I'm worried that the potential for abuse of this is high. I'm thinking of some bored teen going through and adding themselves to every shadow event. Yes they could get flagged and banned (subject to the above) but the turnaround on that could still lead to confusion and/or angst. There are THO-ish staff who manage the shadow schedule. Perhaps we can create a user role akin to shutternauts/shutternaut manager who can "approve" or "lock" event profiles?

challfry commented 3 days ago

My original plan for shadow performer profiles is that the self-serve profile editor would only be available during pre-registration and only viewable by mods until we got on the boat. So, before we got on boat there wouldn't be anyone viewing performer profiles to report bad content to mods, and once we got on the boat the profiles were no longer user-editable.

So, the rough plan was for us to give the shadow performer profiles a once-over when we shut down pre-registration and before we get on the boat.

That's changed slightly, in that we can give individual users a UserRole that lets them create/edit their profile while on the cruise. Unless we give out a lot of these I'm hoping it won't be a serious issue--bad actors aren't likely to bother requesting the user role in person.

Users other than the actual organizer claiming a shadow event and making a legitimate-looking profile for it could be an issue; but from a moderation standpoint we've got a "No I'M Spartacus" problem. The only way we can know who's the real McCoy is getting THO to lookup in the reg code book and then cross-reference their spreadsheet (probably? It's probably a spreadsheet) of who got approved for shadow events. I'm pretty sure they don't want to be doing this a bunch while they're getting ready to embark (or worse, on boat).

There is currently a limit on shadow event performer profiles; no individual user may attach their profile to more than 5 shadow events. So, we won't have one bad actor spamming every event.

Even so, if there's a large amount of trolling/fake profiles/spam/joke profiles/conflict/abuse, we're not spending tons of time cleaning it up. We'll just turn the Performers feature off in the admin panel and that's that.

For these reasons, I didn't see a place for reporting on performer profiles. Perhaps I'm wrong.

cohoe commented 2 days ago

That process context makes sense. The limit certainly absolves one of my fears. From an ideological PoV I have a notion that "anything generated by users should be reportable" so it still feels nice to have. Particularly if we dish out the role later on. I agree the risk of abuse is low even in that situation.