Area: Forums (re-run) (audit p2r) · Surface: GET /forums/{slug}/moderators, POST /forums/{slug}/moderators/add, POST /forums/{slug}/moderators/remove (ForumController@manageModerators/addSubModerator/removeSubModerator) · Dimension: documentation · Severity: major
Forum owners can appoint and remove sub-moderators scoped to their own forum, distinct from platform-level Moderator role. No wiki article explains how to do this, who can do it, or what powers a sub-moderator gets.
Evidence
Live search https://support.mobieus.io/know/search?q=sub-moderator returns "No results for \"sub-moderator\"." Feature is real and user-facing: templates/forums/moderators.php:44 `Sub-moderators`, :51 `Add a sub-moderator`, :54 form action `/forums/<slug>/moderators/add`; templates/forums/settings.php:311 `<span class="fs-hint">Add and remove sub-moderators.</span>`; ForumController.php:3682 `manageModerators()`, :3738 `addSubModerator()`, :3779 `removeSubModerator()`. None of the forum article bodies contain 'sub-moderator'/'submoderator' (grep across /tmp/body-*.txt = 0 files). The trust-levels-and-roles article describes platform Mod/Admin roles but never the per-forum sub-moderator a forum owner can appoint.
Suggested fix. Document sub-moderator management in forum-administration (or a dedicated section): how an owner adds/removes a sub-mod via /forums/{slug}/moderators, the scope of sub-mod permissions, and the distinction from the platform Moderator role.
Filed by the automated tenant-app audit and adversarially evidence-verified. Status: verified. Open — not yet actioned.
Patrick Bass
@mobieus