"Move" privilege allows comment reset of other users about mumble HOT 6 CLOSED

I have submitted PR ##4196 as a fix for this, using the change that @bontibon suggested. Although I feel this may be only be a temporary measure before something more robust is implemented, this is a quick way to close this issue that'll makes sense.

from mumble.

I figured I should comment here since I just opened PR #1223. In that PR, similar to resetting comments, the resetting of avatars can be done by users with the Move permission. Does anyone see this as as issue? The Register privilege seems more appropriate to me, since resetting user information is more about user management. Thoughts?

from mumble.

I would argue that I want anyone registered to be able to register others but I don't want any other than my moderators to reset comments and avatars.

from mumble.

Reading what has been written here I think that maybe the best idea would be to tie this permission to the Ban ACL. I do like the argument of resetting comments and avatars should be granted to moderators but not other users. To me neither the Move nor the Register ACL seem to be exclusive for a moderator role. In fact I can see lots of situations in which one or the other is given to non-moderators for various reasons.
Banning on the other hand is something that I'd consider to be very moderator-specific so following this argument I think this might be the best choice here. What do you think?

from mumble.

Much better, I like that idea.

from mumble.

I don't think there is a one-size-fits-all solution (by moving it to another ACL), it really should be a separate permission/ACL.

from mumble.