Group Issue - Ejected/Banned member still able to send notices

[Markham Weatherwax]

We've got an issue in a group that allows GROUP NOTICES to be posted by members. One member was abusing this so we ejected and banned that person, but they've been able to continue to post group notices over the last 3 days, even after being ejected and banned from the group. Does anyone have any idea how this is possible and if there is a way to stop this person? We've turned off the ability to post group notices for every role but the owner role, yet this person is still able to post them.

Thank you!

 

[Caleb Linden]

Could you guys file a Jira with the following data:

* Group Name or Group ID

* The name of banned user who manages to send group notices after ejection or ban

* Indicate whether they are ejected or banned

* What the specific Role Name is for the banned person, and what other things that role can do within the context of that group

* Which region you attempted to ban or eject them

* If you know where (which region) the banned user was located when they sent the notices.

[Whirly Fizzle]

Changes made to your group role abilities (either adding or removing abilities) only take effect after you've relogged the viewer unfortunately.
So I suspect this idiot could keep sending group notices until they relogged.

You didn't say what order you moderated them, but if you eject them first without using the ban, they will not be fully removed from the group (can still chat if they have the chat open etc) until they relog.
You need to ban first, which also performs an eject but in a different way, which means they are correctly removed from the group, cannot carry on chatting or sending notices till they relog.
Always, always ban from the group first if you want to downgrade someones group abilities in an emergency or you just want them ejected, even if you lift the ban right after to allow them to rejoin.

Edited September 5, 2019 by Whirly Fizzle

[Alyona Su]

33 minutes ago, Markham Weatherwax said:

We've got an issue in a group that allows GROUP NOTICES to be posted by members. One member was abusing this so we ejected and banned that person, but they've been able to continue to post group notices over the last 3 days, even after being ejected and banned from the group. Does anyone have any idea how this is possible and if there is a way to stop this person? We've turned off the ability to post group notices for every role but the owner role, yet this person is still able to post them.

Thank you!

 

Should submit a JIRA bug report because if what you say is accurate and true it appears they have found a vulnerability or exploit.

[Rolig Loon]

I've noticed that when I make a change to group abilities, they don't always update immediately for all group members, but I haven't been able to document that.  The other night, for example, I changed the abilities for the Everyone role so that my alt could set Home on parcels that are group-owned. It took an hour or so before she could do it, though.  SL was acting funny, so it may have been nothing more than normal wonky server behavior, or it could be a flaw in the way that the system applies changes like that.

[NeevaBecketEmagan]

I'll file the Jira, just collecting more information now. We did tests for the problem yesterday after removing the ability to send Notices from the Everyone role. Another user (our tester) was able to send notices, but now, almost 24 hours later, he logged again and the 'New Notice' button isn't available for him. As Rolig said, looks like it take time to apply the changes. And the spammer user was using it as exploit. The user sent 2 notices this morning, and no more. I'm waiting to see if it send again, or was finally stopped by the changes in the group (4 days after, that is very annoying)

Edited September 5, 2019 by NeevaBecketEmagan

[Rolig Loon]

31 minutes ago, Whirly Fizzle said:

Changes made to your group role abilities (either adding or removing abilities) only take effect after you've relogged the viewer unfortunately.

I never knew that.  Thanks, @Whirly Fizzle

[Markham Weatherwax]

44 minutes ago, Whirly Fizzle said:

Changes made to your group role abilities (either adding or removing abilities) only take effect after you've relogged the viewer unfortunately.
So I suspect this idiot could keep sending group notices until they relogged.

You didn't say what order you moderated them, but if you eject them first without using the ban, they will not be fully removed from the group (can still chat if they have the chat open etc) until they relog.
You need to ban first, which also performs an eject but in a different way, which means they are correctly removed from the group, cannot carry on chatting or sending notices till they relog.
Always, always ban from the group first if you want to downgrade someones group abilities in an emergency or you just want them ejected, even if you lift the ban right after to allow them to rejoin.

There is an order to it, yes. For chat spammers and griefers I use the moderation control to disable the specific user's ability to text chat (deselect "allow text chat")  and that stops them immediately from posting more messages. Then I can do the ban/eject from the group. Unless it is done in that order the chat spammer/griefer can continue to post in the group chat as long as they keep the current/active group chat window open. That usually works for me, except when another moderator jumps the gun and ejects them before doing the 1st step. 

Neeva banned the person via the group info members control - which ejected them from the group. Since the person never opened a connection in chat, there is no moderation control beyond ejecting/banning in the group info. I've never actually had a group before that allowed the everyone role to post group notices, so it is completely beyond my experience as to how this idiot could do this. A delay I can understand, but even if the person kept themselves logged in for all those days, other than keeping the group info window open all that time, 4 days later and still able to post group notices... it is beyond my understanding. *chuckle* 

 

[NeevaBecketEmagan]

Yes, the only option I had to remove the person was banning in the members panel of the group window. The person wasn't in the chat, so, no way to do the proper moderation sequence that is used with chat spammers. But the ban took effect only 4 days later. Don't know why the notices wasn't stopped in the server, that, for me, is the logical approach to deal with banned users.
I did the ban to the notice spammer (the first ban) user when I was in a newly created region (less than 20 days), that was put in the wrong server when I bought it (it was saying I was in a mainland region). Had to ask support to fix the region the day after the order.

 

Jira created: https://jira.secondlife.com/browse/BUG-227589

Edited September 5, 2019 by NeevaBecketEmagan
added the link to the Jira