Permission to purge your posts should be separate from edit permission.

[dwendt]

I believe the code in question is here:

NodeBB/src/postTools.js

Line 181 in a65d612

privileges.posts.canEdit(pid, uid, function(err, canEdit) {

Allowing users to perma-delete their own posts is super abusable. It should be its own permission, off by default for registered users imo. You could say that they could just edit the content of their post out -- but at least I could have a plugin keep track of every post edit and give me a history to restore that post back to.

Doesn't seem like there are group-level permissions yet, so it'd need to be a checkbox under users I guess.

[barisusakli]

Maybe edit and delete should be options like create topics, post reply permissions in manage/categories. Then it can be assigned based on categories/groups as well.

[dwendt]

Yeah that sounds good, though "delete" and "purge" should still be separate. One has no chance of recovery of the post by an admin without plugins, the other is sorta safe.

[rdelcampog]

@barisusakli Sorry for the duplicate issue.
That is a "must" to use NodeBB in some countries. Hope to see it in the near future.

Thanks!

[ghost]

What about allowing users to disable their user account and have their information hidden, instead of doing a purge? A soft delete.

[MegaGM]

#3255
Please, add the option