Discussion privacy and tokens

There are two ways a private discussion can be accessed by a user.

• If the user created the discussion with a registered user profile, they will have to login to access it.
• If they created the discussion as an anonymous user (ie not logged in, and not having a user profile), the discussion has a secret token and in the notification email they receive, the link to the discussion includes the token (http://.../654-problem?anon_token=XXXX). Only people with the token can access the discussion.

As long as a user doesn't share this special link, the discussion will remain unaccessible by anyone other than support staff and the user.