@
Jasper BurnsPermissions, part 1: Introduction
Now allow me to explain Hubzilla's permissions system to you. From a Mastodon point of view again.
Hubzilla's permission system works on three levels. In Mastospeak, the first level is your entire account.
The second level is everyone whom you follow, individually. Like, you can go to your list of followed accounts and click on them and configure them. Among other things, you can assign to them a set of permissions that, usually, you'll first define. You'll probably have multiple such sets of permissions.
(Yes, this completely leaves out those who only follow you, and whom you don't follow back. Such a thing does not exist on Friendica, Hubzilla, (streams) and Forte. That is, it does, but you don't have a list of these, and you can't configure these, because they can't do much anyway as long as you don't follow them.)
And the third level is each toot that is not a reply, and then that toot forces its own permissions hard upon all toots that reply to it. If you reply to someone else's toot, your toot will have the same permissions as the start toot with no way for you to change them.
Translated to Mastodon, Hubzilla offers the following permissions:
Can see your toots when visiting your Mastodon account at
https://mastodon.social/@jasperbCan send their toots onto your timeline (I'm being serious here, you can literally follow someone and forbid them to send you their toots)Can see your profileCan see your lists of followers and followed when visiting your Mastodon account at
https://mastodon.social/@jasperbCan see both the images and other media in your toots and the images and other media you've tooted at
https://mastodon.social/@jasperb/mediaCan fave and reply to your toots (those of your toots that aren't replies)Can send you DMs
In addition, there are more permissions that don't translate to Mastodon because they cover features that Mastodon doesn't have:
Can upload images and other files and modify existing files at
https://mastodon.social/@jasperb/media(because
https://mastodon.social/@jasperb/media is not a managed cloud file storage, and the only way to add images or other media there is by you tooting them)Can see the webpages you've built on your account
(because Mastodon doesn't have webpages)Can see the pages in the wikis you've built on your account
(because Mastodon doesn't have wikis)Can edit the webpages you've built on your account
(because Mastodon doesn't have webpages)Can edit the pages in the wikis you've built on your account
(because Mastodon doesn't have wikis)Can send you a toot by visiting your Mastodon account at
https://mastodon.social/@jasperb and using the toot editor that's present there to send a toot straight to your "wall"
(because Mastodon doesn't have a wall, Mastodon doesn't have a toot editor on your account page for people who aren't you, and Mastodon doesn't have this entire feature)Can like or dislike any element in your profile at
https://mastodon.social/@jasperb(because liking or disliking things in profiles is not possible on Mastodon)Can chat with me
(because Mastodon doesn't have a chat)Can automatically repost my toots through their account
(because Mastodon doesn't have this feature either)Can do absolutely anything on my account that I can, just by visiting
https://mastodon.social/@jasperb(not possible for a whole lot of reasons)
Translated to Mastodon again, (streams) and Forte offer the following permission settings, some of which are yes/no switches, some are numbers or text fields:
Automatically confirm follow requests (yes/no)Allow replies on your start toots fromManually allow disallowed replies (yes/no)Only allow replies on your start toots for so many days (number)Allow DMs fromAllow to see your followers and followedAllow to full-text search your accountAllow non-followed-non-followers to fave your toots (yes/no)Be notified about non-followed mentioning you (yes/no)Not if at least so many accounts are mentioned (number) (this is spam prevention)Receive toots from non-followed if they contain any of these hashtags (same as following hashtags, only that this is one text field and not a bunch of followed "accounts")Not if at least so many hashtags are in the toot (number) (again, this is spam prevention)Don't allow replies to replies from non-followed (yes/no) (reply guy filter)Show a timeline of your own toots (yes/no)Add your account to the directory (yes/no)Hide your account from Google and other search engines (yes/no)Delete toots and their replies from your timeline if you haven't interacted with them after so many days (number)Allow toots from your followed accounts that are replies in threads starting with toots from accounts that you don't follow
Again, there are permissions that don't translate well to Mastodon:
[list]Manually allow toots from those who request to follow you
(Doesn't make sense on Mastodon because if someone wants to follow you, you do not have to follow them back; on (streams) and Forte, confirming a follow request does make you follow them back)Show links to all clones of your account in your profile
(Mastodon doesn't have nomadic identity)Don't show whether you're online
(Mastodon doesn't show whether you're online anyway, it doesn't even have this feature)[/list
That said, some of these permissions don't make sense from a Mastodon point of view, namely those that handle what people can see when visiting your profile at
https://mastodon.social/@jasperb. There would have be some way to identify them to grant them the permissions you've given them.
Hubzilla has such a way, as do (streams) and Forte. It's OpenWebAuth, a "magic sign-on" system created by the creator of these four for a Hubzilla fork that was backported to Hubzilla and inherited by (streams) and Forte. These three can recognise logins to grant guest permissions, and their logins can be recognised. There are a few more Fediverse applications whose logins can be recognised. This was actually also developed for Mastodon and ready to be merged in, but the patch was actually silently rejected.
(5/9)
#
Long #
LongPost #
CWLong #
CWLongPost #
FediMeta #
FediverseMeta #
CWFediMeta #
CWFediverseMeta #
Fediverse #
Friendica #
Hubzilla #
Streams #
(streams) #
Forte #
Privacy #
Security #
Permission #
Permissions