I just reviewed (and rejected) a suggested edit on a story ID question by user "Scottybrown100" attempting to edit a post by user "Scott Brown". It appears that this is the same user, but the person lost his login credentials for the original "Scott Brown" account. The edit was to add more details to the question description.
What should we do in cases where a user suggests a substantial edit1 because he appears to have lost the login credentials for his original account and is therefore forced to suggest the edit from the new account?
Although I'm pretty sure this is the same user (especially since it's a story ID question), my concern if we approve these suggested edits is that a malicious user could create a new account with a similar username to pose as the original user in order to vandalize a post. Consequently, I rejected the edit.
I see a couple of possibilities here:
- Reject the edit for some reason like "attempt to reply". Reviewers can't be sure it's the same user, and the user can't approve answers with the new account even if it is.
- Reject the edit and flag for a moderator. I believe (correct me if I'm wrong) that mods can see a user's IP address, so a mod could confirm if the two "users" are using the same IP address.
- Approve the edit (perhaps only for story-identification questions, since a lot of new users -- who might lose their original account information -- ask these questions). Essentially, the reviewer assumes it's the same user.
1Substantial here means that the edit changes the meaning of the post, such that the edit would be rejected if the editor was obviously not the original poster. If the edit is a simple spelling correction or similar, there is no issue whether the editor is the same as the original poster or not.