# Disable editing of posts for new users

**URL:** <https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485>\
**Category:** Forum and website feedback\
**Created:** [January 23, 2019, 4:08pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485 "2019-01-23T16:08:10Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![lassoan](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.slicer.org/lassoan/32/13_2.png) [@lassoan](https://discourse.slicer.org/u/lassoan)\
**Post date:** [January 23, 2019, 4:08pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485/1 "2019-01-23T16:08:10Z")

</div>

It has become a common pattern that spam bots post some seemingly valid message that they edit to add malicious links a few days later (when people who monitor all new posts don’t read them anymore).

See for example these topics (spam posts are marked deleted and will disappear at some point):

- [Initial presentation](https://discourse.slicer.org/t/initial-presentation/100/38)
- [Migrating GitHub issue to discourse](https://discourse.slicer.org/t/migrating-github-issue-to-discourse/3738/8)

There are two options to discourage these spam bots:

- Option A: Change [minimum trust level for post editing](https://discourse.slicer.org/admin/site_settings/category/all_results?filter=min%20trust%20to%20edit%20post) from “0: new user” to “1: basic user” (see settings). Since [trust level 1 can be earned by just browsing the site](https://blog.discourse.org/2018/06/understanding-discourse-trust-levels/), it might not be very effective if spam bots are programmed to spend some time on the site.
- Option B: Reduce [time limit for editing a post](https://discourse.slicer.org/admin/site_settings/category/all_results?filter=post%20edit%20time) form the default 60 days to something like 1 hour (or maybe even 15 minutes). We would probably spot malicious links added soon after a new post is created. Spammers currently wait a few days.

Option B would be probably more effective, but it would impact all users. However, it may not be that bad to limit post editing to quick modifications right after posting anyway. So, I slightly prefer option B.

What do you think @jcfr @pieper @ihnorton @fedorov

---

<div class="post-metadata">

**Author:** ![pieper](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.slicer.org/pieper/32/8_2.png) [@pieper](https://discourse.slicer.org/u/pieper)\
**Post date:** [January 23, 2019, 5:37pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485/2 "2019-01-23T17:37:38Z")

</div>

Yes, I prefer option B. If people make a big mistake like posting possible PHI or something and don’t realize right away then they should be able to contact an admin to get the post edited.

---

<div class="post-metadata">

**Author:** ![fedorov](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.slicer.org/fedorov/32/14_2.png) [@fedorov](https://discourse.slicer.org/u/fedorov)\
**Post date:** [January 23, 2019, 6:05pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485/3 "2019-01-23T18:05:31Z")

</div>

Amazing. I am glad you caught this Andras.

Why don’t we implement both A and B?

---

<div class="post-metadata">

**Author:** ![lassoan](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.slicer.org/lassoan/32/13_2.png) [@lassoan](https://discourse.slicer.org/u/lassoan)\
**Post date:** [January 23, 2019, 6:18pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485/4 "2019-01-23T18:18:23Z")

</div>

> [@fedorov](#):
>
> Why don’t we implement both A and B?

It is better do the minimum necessary restrictions to not frustrate users. We can first try if applying one of the restrictions is enough.

---

<div class="post-metadata">

**Author:** ![jamesobutler](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.slicer.org/jamesobutler/32/7511_2.png) [@jamesobutler](https://discourse.slicer.org/u/jamesobutler)\
**Post date:** [January 23, 2019, 6:20pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485/5 "2019-01-23T18:20:22Z")

</div>

OptionB sounds like a good option Andras.

I was suspicious of those comments in the topics that you marked as examples above. I specifically checked the specific user a day later to see if they modified the posts with links and sure enough they did. I then marked as spam at that time.

---

<div class="post-metadata">

**Author:** ![lassoan](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.slicer.org/lassoan/32/13_2.png) [@lassoan](https://discourse.slicer.org/u/lassoan)\
**Post date:** [January 23, 2019, 6:23pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485/6 "2019-01-23T18:23:03Z")

</div>

Thanks for all the feedbacks. I’ve set post editing time limit to 60 minutes. Hopefully it is long enough for legitim users and short enough for spammers.

---

<div class="post-metadata">

**Author:** ![fedorov](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.slicer.org/fedorov/32/14_2.png) [@fedorov](https://discourse.slicer.org/u/fedorov)\
**Post date:** [January 23, 2019, 6:31pm UTC](https://discourse.slicer.org/t/disable-editing-of-posts-for-new-users/5485/7 "2019-01-23T18:31:35Z")

</div>

> [@lassoan](#):
>
> It is better do the minimum necessary restrictions to not frustrate users. We can first try if applying one of the restrictions is enough.

Makes sense. I thought most will meet A anyway, but I can understand your concern. No objections!