feat: account suspension #766
Labels
No labels
Bug
Cherry-picking
Database
Dependencies
Dependencies/Renovate
Difficulty
Easy
Difficulty
Hard
Difficulty
Medium
Documentation
Enhancement
Good first issue
Help wanted
Inherited
Matrix/Administration
Matrix/Appservices
Matrix/Auth
Matrix/Client
Matrix/Core
Matrix/Federation
Matrix/MSC
Matrix/Media
Meta
Meta/Packaging
Priority
Blocking
Priority
High
Priority
Low
Security
Status
Confirmed
Status
Duplicate
Status
Invalid
Status
Needs Investigation
To-Merge
Wont fix
old/ci/cd
old/rust
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: continuwuation/continuwuity#766
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
While we can already deactivate accounts in a way that effectively locks them, however, if there is no way to contact the locked user out-of-band to supply them with a new password, there is no way to "unlock" the account in a way that allows it to be used again.
Account suspension is less effective than locking, so if we do end up implementing these, locking should ideally be priorities over suspension - clients losing state isn't much of a concern when most of them have a way to perform a new initial sync anyway.
feat: account locking and suspensionto feat: account suspensionLocking is being dropped from the scope of this issue because most admins I've spoken to have assessed that suspension is generally the desired course of action instead of locking, since locking is basically just non-nuclear deactivation (which we already support), whereas suspension basically just makes users read-only and has minimal affect on a legitimate user if they are accidentally suspended and later unsuspended.
When implementing, a synapse-compatible HTTP endpoint will also likely be added to allow moderation bots like Draupnir and Meowlnir to automatically issue suspensions for users who wind up on policy lists.
closed by #876, the HTTP endpoint will be added by whatever PR closes #922