Role bot requirements about discord-bot HOT 5 OPEN

for each on-chain member who has both a Discord handle in their metadat, and that handle exists on exactly one Discord member, then add that Discord member to that Discord role.

This part is a problem in that people can do impersonation attacks, especially if we assign distinct permissions to Discord roles. There is no clarification on what to do if two or more members claim the Discord handle. Furthermore, entering a Discord username on a Joystream profile does not verify it.

The current implementation of the bot requires a user to sign a challenge using polkadot-js to prove they own the Joystream membership handle.

This isn't included in your specification, but is this an acceptable method of verifying users?

from discord-bot.

I did not understand this, can you raise the issue on a DAO meeting in the near future?

from discord-bot.

@bedeho
We have a question about the requirements.

Currently, the list_role_members [discord_role] command displays all users with [discord_role] like this.

If the viewer is interested in one of the displayed users, they can use the who_is command to learn more.
I think it's excessive to display all the roles of all the users with [discord_role]

For example: If I type, list_role_members @FoundingMember, I want to see who are the founding members, and not what roles each of the founding members are occupying.

from discord-bot.

I think it's excessive to display all the roles of all the users with [discord_role]

Agreed.

from discord-bot.

@chrlschwb I would suggest one thing in addition to what is present. There should be a discord role called something like on-chain member or similar which is registered to all users who have their Discord set up in their Pioneer profile.
Although most people are founding members due to our community size, this could change and we could have workers etc that aren't--it makes it a bit easier in the long term in Discord to communicate with people who have actually gone to the trouble of properly setting up their Discord profiles.

We had the same thing with the old bot but it was called on-chain identity verified--we could use the same name.

from discord-bot.