@joergi What may appear as a bug is really a consequence of the liberal and wide open configuration/driver options, for example postgres.
Or not properly configuring permissions.
These are not bugs, the one DM bug you reported is actually more complicated than you think, we adopt the same addressing that Mastodon does, so don't mention someone that you don't want the DM to be sent to.
@dansup
Yes, i try not to involve pixelfed users in DMs. And i was looking at the part of the code. And private was translated to followers only, that's why it happens.
I believe you 100%, that this is not an easy fix. I also don't know how this could be solved without adding a new privacy layer. I haven't looked it up, but isn't that defined by the protocol?
I know #hubzilla also has possibility to show posts only to some selected users. I fear the same thing will happen? I haven't tested it