This is one of my concerns when upgrading to a newer version

The title row could be utilized for the notification originator instead of always saying "Mattermost" taking space without adding value. The icon already tells you which app it's coming from. Also the content shows Markdown, emoji and escaping raw, also on Windows desktop.

From: https://github.com/mattermost/platform/issues/1901

Outgoing webhooks are not triggered by other webhooks posts. For example if bot_a posts "hello" on Town Square and bot_b is typically triggered by "hello", it will not be triggered.

If this was implemented, the danger is creating cycles unintentionally, so there should be a way to avoid that.

Currently, we have users that work in close proximity to one another, and sometimes take on each other's identities, it would be nice if we had a way for a user to delete their direct message history. Reopening a direct message with a user should start fresh. If the logs remained unchanged that would be great too.

AppConfig is a MDM management method for third part application.

It allow IT team in charge of device management to preconfigure company's apps according to internal needs.

Regarding Mattermost, this is needed to preset server URL + User ID. Like that end user only have to enter their password.

Better user experience for the end user and less work for the help desk.

http://www.appconfig.org

The reply arrow that is seen when hovering over a message on the desktop app is not available on the phone apps until you hit the "...". Is it possible to have both the ... and reply arrow visible on the phone app as well? Thanks!

In other chat apps, if someone writes a phone number, it turns into a clickable link automatically, so you can easily call someone. In our field, we are constantly giving phone numbers in our chats for field staff who need a call from a supervisor, and this would speed up our processes immensely. Thank you.

If notification has only direct messages from single sender, add Reply-To with sender's email.

One may find the need to (ideally quickly) switch between the same two (or n) channels, similar to how one can do it with TV channels via the "PRE-CH" button on TV remotes.

It would be great to have a key combination for that.

My shop is very Linux and command line heavy. We would like to see the [install dir]/bin/platfrom utility expanded to include more features, which can then be scripted. The first such feature we would like to see would be the ability to list users from the utility.

To have better security control and use MM as a viable alternative in an intranet environment, it will be great to have the option at admin level to disallow nornal users to invite external users without admin approval

We have several teams at work and each channel in the team has a specific purpose. It would be ideal if we could set a time at which a recurring message of the day would be posted. We would include links to resources for the team as well as recent news for people who have been out of the office and are returning.

It would be like an extension to the header and purpose sections. Ideally tagging people would work such that some of the messages can act as daily reminders to everyone of the schedule.

Show a member list on the side of the chat window listing all the users that are in the current room, sorted by status and then name (so that logged out users are at the bottom).

This seems critical to communication .. who's in the room, who's online, who am I talking to, am I in the right room before typing @everyone, etc. At a glance. The little member button with drop down is insufficient especially in rooms with hundreds of people.

Screenshot from Slack: http://take.ms/YhtK8

Right now you can only navigate through images posted at the same time, whereas slack will let you navigate through the entire history of images

It would be nice to be able to add / remove custom emojis via API. Then it would be very simple to propose complete packs of custom emojis and apply them.

The current webhooks attachment limit is not enough for rather big tables.

Alternatively:
https://mattermost.uservoice.com/forums/306457-general/suggestions/15373650-to-be-able-to-upload-files-as-attachments-via-we

This pull request introduced a security measure to protect against clicjacking attacks: https://github.com/mattermost/platform/pull/253

But it also prevents some legitimate uses of iframes. For example, Nextcloud has a "external sites" function to run any app as if it was a Nextcloud app, by putting it in an iframe inside Nextcloud (https://docs.nextcloud.com/server/9/admin_manual/configuration_server/external_sites.html).

My proposal is to add some settings to allow an authorized domain, and then change X-Frame-Options, instead of DENY put ALLOW-FROM this domain. And to check the domain also in the javascript check in head.html.

This way it would allow legitimate uses, while still protecting against clickjacking attacks.