Feature #22138
openNew Privacy Setting for Groups
0%
Description
Hi All,
Following up on the team meeting on Friday 2/14 and our discussion of group member defaults.
Do we want to make a privacy setting for groups that falls in between private and public? This would allows group content and members lists to be visible to logged in commons members only and not visible to non-logged in visitors.
Currently there is Public, Private, and Hidden privacy settings for groups.
In Public groups: group listing in directory, forums, member lists, events can be viewed by any one.
In Private groups: group listing in directory can be viewed by anyone; forums, member lists, events can be viewed only by group members
In Hidden Groups: not searchable in directories; forums, member lists, events can be viewed only by group members.
We proposed creating a Semi-Public setting: group listing in directory can be viewed by anyone; forums, member lists, events can be viewed only by group members.
Rationale: there is value in group content being public only to CUNY folks - can view events, forum posts, get info, and determine if they want to join the group. Moreover, there is not always a need for group content to be completely public, as public visitors cannot respond to forums and join groups etc.
Relatedly, a "semi-public" (public to logged in users) would also provide another layer of privacy fro group members since anyone on the internet would not be able to see the membership lists for a group. For example, (in this political climate) I can see how it might be helpful if the membership list for any DEI, Anti-racism groups on the Commons are not completely public.
If we do move forward with a semi-public group privacy setting option, we should not change any setting of current groups but instead do outreach to group admins that this new feature is now available and provide rationale for why admins might change their privacy settings.
Files
Updated by Laurie Hurson 3 months ago
Also - I feel like there may be a need for another ticket with a differentiated aspect about bolstering group privacy - maybe bulk hiding member lists from logged out users? But I cannot remember exact details and if this was supposed to be separate ticket. If so please let me know and I can write up the other ticket.
Updated by Colin McDonald 3 months ago
Thanks for this overview, Laurie. Regarding your follow-up about whether we might bulk hide member lists from logged-out users, we did discuss this but leaned I think toward not making a blanket change that would impact existing groups.
I do think there's an argument to be made that the semi-public option could be the default selection when you go to create a new group (the default is public right now), to protect anyone who breezes through the creation steps.
The semi-public rationale looks good to me and tracks with my notes from Friday. How should semi-public work as far as being able to join? Is it the same as public, where any member can join automatically, or is it like private and I believe hidden where you request to join and then need to be approved?
Are there any other technical differences between the three privacy settings we should be considering here?
On Friday we also discussed adapting Open Lab tools where a user can individually hide their memberships across all groups they belong to, but that would be more complex than the group-level changes. Perhaps we could explore this later.
Updated by Laurie Hurson about 1 month ago
Moving this forward, I am proposing the addition of a group privacy setting called "Semi-Public" or "Public to the Commons" that, when selected:
- Group is listed in directory (can be viewed by anyone- logged in or out)
- Group content (forums, member lists, events) can be viewed by - and this is the difference between private groups- all logged in members of the commons
- Commons members can join groups through similar mechanism as public groups
The affordance of this new privacy setting is that it offers commons members some privacy because not just anyone on the internet can see that they are in a semi public group. Group admins can choose to restrict complete public visibility of their groups while remaining open to the commons. My theoretical use case for this setting is the Anti-racism at cuny group. As it stands any one on the internet can visit the commons, search "racism" in the group directory and this public group is the second hit. A logged out visitor can click into the group and see all member and forum posts.
There are some instance when a completely public group mught make sense but in this case and many others I think, the group is geared toward CUNY folks and making the whole group public presents privacy issues, especially in our current political landscape.
Updated by Boone Gorges about 1 month ago
This functionality sounds pretty good, but calling it "semi-public" adds to what is, I think, already a confusing system for group privacy. "Public" and "Hidden" make sense, but "Private" is really kind of an odd name. With that in mind, here's something for others (Laurie? Sara?) to think about. What if, instead of having Public/Semi-Public/Private/Hidden radio, we instead have three different settings: 1. Is visible in directory; 2. Can be joined by Commons member; 3. Content is visible to non-members. Public groups would say 'yes' for each, Hidden would be 'no' for each, Private would be Yes for 1 and No for 2 and 3. We could keep the Public/Private/Hidden/(Semi-Public) as a shortcut if it we thought it was a helpful heuristic, like "recommended settings", so when you click 'Private', certain specific options are pre-selected for you.
Anyway, this kind of more granular setup certainly adds to the number of questions that a group creator needs to ask. But it also provides more flexibility, and might make each individual point easier to understand. Just putting it out there as a provocation.
Updated by Sara Cannon about 1 month ago
Based on our conversation in todays meeting, I've attached a screenshot for what "Public", "Private", and "Custom" might look like and would love to hear everyone's thoughts
Updated by Colin McDonald 20 days ago
Belated thanks for this mockup, Sara! I like the checkboxes with default settings, but I thought we liked Hidden and thought Private was confusing? Should it be Public and Hidden as the most-open and most-restrictive options?
I wonder if there should be a line underneath summarizing the settings instead of just a tooltip. Maybe it depends on the length of the text. Are we thinking something like this?
- Public: Anyone on the web can see group content (forum, members, events). Any Commons user can join.
- Hidden: The group is not publicly visible or searchable, only members can see its content, and only invited Commons users can join.
- Custom
Under Group Visibility, is this the same thing but simpler?
Who can find the group in the Commons Directory?
- Anyone on the web
- Only logged-in Commons users
- Only group members
(I'm not familiar with the admin-only visibility - do we have this?)
Then don't we just need two options for this one, because publicly visible is only the Public option? And it's publicly visible in general right, not just in the Directory? Cleaning up the language a little.
Who can view the group's content and member list?
- Any logged-in Commons user
- Only group members
And don't we need this question too?
Can any Commons user join the Group?
- Yes, and they will be automatically accepted
- Yes, but they must be approved by an admin
- No, they must be invited to join by an admin
Going through all of this, I'm wondering if it's more clean to do what Boone suggested and have at the top:
Public
Hidden
Custom
And then when you select Public or Hidden, there are default checkmarks activated as defined below IN CAPS. But if you select Public or Hidden and then change one of the boxes, or if you just start selecting boxes, the selection up top changes to Custom. This way, you see in one place all of your options, and how they are changing.
I'm not sure if we need tool tips with this solution, as it's clear in the lower section what Public and Hidden provide. Or maybe it's tool tips with hidden text as above.
Who can find the group in the Commons Directory?
- Anyone on the web (PUBLIC)
- Only logged-in Commons users (Semi-Public and Private internal types)
- Only group members (HIDDEN)
Who can see the group's content and member list?
- Anyone on the web (PUBLIC)
- Any logged-in Commons user (Semi-Public internal type)
- Only group members (HIDDEN and Private internal type)
Can any Commons user join the Group?
- Yes, and they will be automatically accepted (PUBLIC)
- Yes, but they must be approved by an admin (Semi-Public and Private internal types)
- No, they must be invited to join by an admin (HIDDEN)
Updated by Laurie Hurson 4 days ago
HI All,
Apologies for my delayed response on this. I have been slow to respond because I am bit confused about the progression of discussion.
I think the original the issue I was trying to address was that I am concerned that group members and all content of public groups can be seen by anyone on the internet.
Current group settings are in the screenshot. The description of"public" is actually wrong in the 3rd bullet, which reads "Group content and activity will be visible to any site member." This is not true and should actually read "anyone on the internet". Which is where the issue lies - I am concerned users spinning up public groups may not be aware that literally everything in the group is public.
That said I am wondering if, to simplify this change (and avoid creating new setting categories), can we have it so that if someone selects "public group" then they see two questions to determine the state of "publicness"...
The the privacy options would stay the same:
Public
Private
Hidden
If Public is selected, then two check boxes appear:
- Would you like to hide member list from logged out users? Y/N (tool tip: all other group content (library, forum) remains public to others)
- Would you like to hide all group content from logged out users? Y/N (tool tip: selecting this option makes the group "public" only to logged in commons users)
there would, then be a weird semi public option in theory but it would only be visible to us on the back end, and we don't need to have the user make many choices. Methods for joining each group type remain the same (which all require a user to be logged in, and then the variety stems from there)
This would, I think, simplify this change but also meet the original goal of the ticket which was to protect group members identity and privacy?