Suspensions

​

Overview

​

What a suspension blocks

• Creating, updating, or deleting comments — including editing or deleting your own
• Adding or removing reactions — on comments and entities
• Creating, updating, or deleting entities, and publishing drafts
• Creating or joining spaces
• Creating events and RSVP’ing
• Chat: creating conversations, sending messages, reacting to messages, reporting messages
• Collections writes (create, add entity, update, delete)
• Following, requesting a connection, and accepting or declining a connection
• Standalone file and image uploads
• Filing reports

​

What stays open

• All reads (GET requests) — public and member-only content
• Sign in, refresh token, sign out, change password, account-deletion request/confirm
• Editing your own profile and deleting your own account
• Marking notifications read / mark-all-read
• Registering/deregistering push tokens and updating notification preferences
• Linking/unlinking OAuth identities
• Chat: marking as read and muting conversations

​

The blocked-write response contract

{
  "error": "This account is suspended and cannot perform this action.",
  "code": "user/suspended",
  "reason": "Repeated spam",
  "endDate": "2026-08-01T00:00:00.000Z"
}

​

Effective suspension

​

SDK: consuming suspension state

​

Ambient state — useUser

import { useUser } from "@sublay/react-js";

function Composer() {
  const { isSuspended, activeSuspension } = useUser();

  if (isSuspended) {
    return (
      <SuspendedBanner
        reason={activeSuspension?.reason}
        endDate={activeSuspension?.endDate} // null = indefinite
      />
    );
  }

  return <MessageInput />;
}

​

Reactive error — SuspendedError

import { useCreateComment } from "@sublay/react-js";
import { SuspendedError, isSuspendedError } from "@sublay/core";

async function submit() {
  try {
    await createComment({ content: "…" });
  } catch (err) {
    if (isSuspendedError(err)) {
      // err.reason, err.endDate (null = indefinite)
      showSuspendedState(err.reason, err.endDate);
      return;
    }
    throw err;
  }
}

​

Dashboard flow

• View. A user’s suspensions are shown on their profile in the Users view — active ones prominently (reason, until-when, who set it), past ones as history. Indefinite suspensions (endDate: null) show as active.
• Suspend. Suspend a user with a reason and an optional expiration. Leaving the expiration empty creates an indefinite suspension.
• Lift. Lifting a suspension expires it in place (it isn’t deleted — the audit trail is preserved). Because multiple active suspensions can coexist, lifting one active row may leave others in place. A “lift all active” action fully un-suspends the user by clearing every active row at once.

​

What suspension deliberately does not do

• Reads are never blocked — a suspended user can read everything they could before.
• Sign-in is never blocked — so the user can see the reason/end date and appeal.
• There is no per-app or per-severity configuration. Suspension is a single, fixed behavior: block participation writes, allow reads and account self-management. There is no advisory level, no read-blocking mode, and no mute vs ban severity.

​

Related

• useUser hook — isSuspended / activeSuspension
• User data model — the Suspension shape on AuthUser
• Moderation overview — reporting and content moderation
• Space membership — space-scoped bans (a separate axis)