when a message is deleted, it should...
when a message is deleted, it should...
when a message is deleted, it should...
if you answer "something else" please reply with what the something else is
presently i am feeling like #3 is the right answer. but would like to know others' feelings on it
i think in trying to make what these mean clear, i made it less clear
separately, unread notifications for deleted messages...
admins of communities should...
(i can see 1 being useful for antispam but also highly abusable. could be dealt with by an audit log)
i think after the discussions posting all this has sprung in various places this is my conclusion:
* deleted messages are replaced with permanent deleted message markers, which do not retain authorship information to avoid metadata leakage and display of spam profiles
* a deleted message that pings you retains a ping marker, so you can see the cause of your ping even if it's torn paper
* notifications from deleted messages stay, but become silent (i.e. stop blinking your notification light or displaying interruptively on-screen, where supported) and have their message replaced with a deletion indicator, so that you're not wondering why you got a notification sound when there isn't a notification
* admins do not get a special super-delete — the confusion and abuse that can be caused by having two modes of deletion is worse than spam removal leaving traces, as it already does generally from moderator pings/etc
* "message deleted by sender" and "message deleted by admin" are distinct states and may be shown differently in the UI
* many deleted messages in sequence that share a cause are merged together
still interested in the poll results though. even if the wording is clumsy
it may be worth providing an authorship-retaining form of deletion, which would probably be called "redact" (to keep authorship) and "expunge" (to remove authorship)
fundamentally both admins and senders should be able to use it
now considering how to make a pixel composer pipeline that generates a "torn paper" ninepatch lol@exa Server (not zone) administrator at minimum should have the ability to expunge, (since they could theoretically edit the database if they wanted to), but should be able to allow zones to expunge if they want.
Having an audit log would be good either way
the argument in favor of #2 is that you may have received a notification sound but not responded to it, and by the time you get around to it you have no notification and were therefore "ghost pinged"