WelcomeUser Guide
ToSPrivacyCanary
DonateBugsLicense

©2024 Poal.co

1.4K

In the HTML source code of the subverse /edit page, I found out that after accidentially clicking the “Disable sub” button (never happened to me, but still noteable), the only thing that protects one from permanently effectively erasing a subverse is a JavaScript-generated confirmation dialogue box asking:

Are you sure you want to disable this sub?
This action is not reversible!

I have also accessed that edit page through a test account (/u/Ha7test), finding out that not just the owner, but any subverse moderator apparently has the ability to disable their subverse.

I know, one should only give moderation access to trusted users, but it is enough for just one moderator to do a mistake (e.g. leave a computer unattended in a public place or have a harsh dispute) for a realistic risk of someone clicking “Disable sub”.
It sounds rather hypothetical, but it only needs to happen once. Then the subverse is air.

Obviously, doing it accidentially is still very unlikely, but I still think that it should not be possible to irreversibly disable an entire subverse with two mouse clicks that can be done within under five seconds.

I hope my point of view is understandable.


Suggestions:

  • Ability to re-enable subverse at any later time.
    • If not, then at least have a grace period of 1 month (or 1 week or 24 hours, if 1 month is too much).
  • Require E-Mail confirmation.
    • Or: Require password re-confirmation.
  • Only allow the owner to disable the subverse, no one else.
In the HTML source code of the subverse */edit* page, I found out that after accidentially clicking the *“Disable sub”* button (never happened to me, but still noteable), the only thing that protects one from permanently effectively erasing a subverse is a JavaScript-generated confirmation dialogue box asking: > Are you sure you want to disable this sub? > This action is not reversible! I have also accessed that edit page through a test account (/u/Ha7test), finding out that not just the owner, but **any subverse moderator** apparently has the ability to disable their subverse. I know, one should only give moderation access to trusted users, but it is enough for just one moderator to do a mistake (e.g. leave a computer unattended in a public place or have a harsh dispute) for a realistic risk of someone clicking *“Disable sub”*. It sounds rather hypothetical, but it only needs to happen **once.** Then the subverse is air. Obviously, doing it accidentially is still very unlikely, but I still think that **it should not be possible** to irreversibly disable an entire subverse **with two mouse clicks** that can be done within under five seconds. I hope my point of view is understandable. ---- ## **Suggestions:** * Ability to re-enable subverse at any later time. * If not, then at least have a grace period of 1 month (or 1 week or 24 hours, if 1 month is too much). * Require E-Mail confirmation. * Or: Require password re-confirmation. * Only allow **the owner** to disable the subverse, no one else.

(post is archived)

[–] 0 pt

Disabling can be reversed by admins

Ah, I see. I initially thought it would be permanently erased the moment it becomes disabled.

[–] 1 pt

It's called "disable" and not "delete" for that reason.

[–] 0 pt

I just had doubts because the warning message says permanently.

[–] 1 pt

Because the mod/owner can't reverse it without the help of an admin.