Reply to thread

That defeats the purpose of an audit log.  An action attempt should always be logged, no matter who does it, whether they were supposed to be able to do it, or whether it succeeded.  Anything less is a security flaw.


Plus, it just doesn't really make sense--why wouldn't you always log it?


As an end user, I expect that the moderator log is going to include all moderator actions.  If someone approves a post, I expect it to appear in the moderator log, whether or not I've marked them as a "global" moderator.  If it's necessary for a user to be marked as a global moderator for logging to function properly, that seems like a design flaw; I shouldn't be able to give users those permissions directly if it's going to break the audit log.


Back
Top Bottom