[Bug]: User votes exposed on Kbin

[retiolus]

Requirements

• Is this a bug report? For questions or discussions use https://lemmy.ml/c/lemmy_support
• Did you check to see if this issue already exists?
• Is this only a single bug? Do not put multiple bugs in one issue.
• Is this a backend issue? Use the lemmy-ui repo for UI / frontend issues.

Summary

If Kbin wants to publicly expose people's votes there's no problem, but if Lemmy doesn't, from Kbin it shouldn't be possible to see which user on a Lemmy server voted on a post.

Steps to Reproduce

1. Vote on any post from Lemmy
2. Search that post on Kbin
3. Consult the "more" tab of the post on Kbin

Technical Details

The author of a vote cannot be consulted on Lemmy publicly, you need to have access to the database to know who voted what.

On Kbin it is possible to see, publicly, who has upvoted or downvoted a post.

Version

0.17.4

Lemmy Instance URL

No response

[cperrin88]

The problem is that a vote in ActivityPub is a message that is sent to everyone who subscribed to the content (in easy terms). That means as soon as someone casts a vote a message is sent out with who voted what. If someone from KBin subscribes to a a lemmy community they get this message as well. How they display this data is completely in their hands. Nothing the lemmy instance can do about that.

[Nutomic]

Not a problem in Lemmy, but feel free to add explanation to the docs.