Posts: 21,668
Threads: 5
Joined: Aug 2011
Reputation:
2,316
2014-03-01, 02:56 PM
(This post was last modified: 2014-03-01, 02:56 PM by .m..)
suppose as a Puppet Master, I have a number of staff Puppet accounts,
those accounts are for display purpose only. if I can select whatever account I have for the moderation,
the system can be simply misused - I can delete posts with the other staff IDs in the logs ..
Posts: 2,754
Threads: 63
Joined: Nov 2011
Reputation:
261
2014-03-01, 03:12 PM
(This post was last modified: 2014-03-01, 03:22 PM by Wildcard.)
(2014-03-01, 02:56 PM).m. Wrote: the system can be simply misused - I can delete posts with the other staff IDs in the logs ..
Yes I understand that and really hadn't thought about it that way before.
Here is what I plan to do to address that. For starters, I'll add a series of top-level settings to disable Puppet Master for each of the actions (posting, moderating, messaging, etc.) so it will be easier to customize.
Then I am going to take a look at how we assign actions (such as, but not limited to, moderating and posting).
If I can find a nice enough way to implement it, I may even let each puppet master only be allowed to puppet in certain ways.
(2014-03-01, 02:56 PM).m. Wrote: suppose as a Puppet Master, I have a number of staff Puppet accounts
Also, this is admin-controlled and uses permissions so no one can just grab up a bunch of staff IDs and use them for puppets unless they are an admin and have permission to use Puppet Master.
[retired]
Posts: 9,905
Threads: 399
Joined: Jan 2010
Reputation:
548
2014-03-02, 04:59 AM
(This post was last modified: 2014-03-02, 05:00 AM by Omar G..)
Moderation logs should log the _puppet account_ and original _puppet master_ should be logged for the same action in a different log system, custom to your plugin. Hope I make myself clearing now.
Just my opinion though.
Soporte en Español
Discord at omar.gonzalez ( Omar G.#6117 ); Telegram at @omarugc ;
Posts: 2,754
Threads: 63
Joined: Nov 2011
Reputation:
261
(2014-03-02, 04:59 AM)Omar G. Wrote: Moderation logs should log the _puppet account_ and original _puppet master_ should be logged for the same action in a different log system, custom to your plugin. Hope I make myself clearing now.
Okay I see what you mean.
I plan on focusing on Puppet Master just as soon as I get MentionMe leveled back out.
Going to try to please everyone if I can
[retired]
Posts: 615
Threads: 32
Joined: May 2008
Reputation:
22
First of all: This is an amazing tool and I really don't know how I made it so long without it. (Oh yeah, admin hijack....).
I'd like to suggest a slight security update, though: It would be better to set the default admin permissions for all people/grups with ACP access to "no" upon install, not to "yes". This way one doesn't accidentally give/leave someone access to the Puppet Master configuration but has to explicitly grant it. (actually that ought to be the case for all plugins, ya).
It would also be nice if one could toggle which puppet master could have mod/admin rights with which puppet.
Another thing I was wondering about: One can send PMs as the puppet, but not read/receive them. It would be lovely to have that kind of access, too.
Posts: 2,754
Threads: 63
Joined: Nov 2011
Reputation:
261
(2014-03-04, 12:20 PM)linguist Wrote: First of all: This is an amazing tool and I really don't know how I made it so long without it.
Thanks so much
(2014-03-04, 12:20 PM)linguist Wrote: It would be better to set the default admin permissions for all people/grups with ACP access to "no" upon install, not to "yes".
The only thing is that if I do that this thread may get filled with support posts like 'I installed it but nothing shows up.'
Nevertheless I'll give it some thought.
(2014-03-04, 12:20 PM)linguist Wrote: It would also be nice if one could toggle which puppet master could have mod/admin rights with which puppet.
I definitely have plans to add that due to the concerns expressed by .m. earlier in the thread.
(2014-03-04, 12:20 PM)linguist Wrote: Another thing I was wondering about: One can send PMs as the puppet, but not read/receive them. It would be lovely to have that kind of access, too.
I know right!? I think about this all the time. See, I have been using this myself for about a year and adding little things here and there as well as working out bugs before release.
The PMs thing was the last thing I added (simply for completeness) and I really haven't figured out how to handle it.
To me, an optimal setup would be that when the puppets get PMs, the puppet master gets the standard PM notice but with some designation of which puppet the PM was sent to.
I'll get it worked out eventually, if you guys can be patient with me. Right now I have to get MentionMe straightened out and then I am heading back to this plugin.
[retired]
Posts: 9,905
Threads: 399
Joined: Jan 2010
Reputation:
548
Seems like templates aren't being cached in the thread page
Soporte en Español
Discord at omar.gonzalez ( Omar G.#6117 ); Telegram at @omarugc ;
Posts: 2,754
Threads: 63
Joined: Nov 2011
Reputation:
261
Thanks Omar
I still haven't made it back to this plugin, but I'll create an issue on GitHub for it.
[retired]
Posts: 2,754
Threads: 63
Joined: Nov 2011
Reputation:
261
Puppet Master 1.0.1 Released
I just fixed an error where templates weren't being cached as reported by Omar G.
Will begin work on 1.1 next to try to handle some of the requests/suggestions/concerns.
[retired]
Posts: 872
Threads: 221
Joined: Feb 2013
Reputation:
18
Looking forward to testing this out. I was going to ask for support to have multiple sign ins from one IP, but this is 10x better.
|