Page MenuHomePhabricator

RevisionDelete: hidden users appear in log entries created after the hiding
Closed, DeclinedPublic

Description

Author: mcdevitd

Description:
Hideuser only has any effect on the log entries and contributions that exist at the time of hiding. If it is possible, it should also hide log entries that are created afterwards. As an example, a vandal account with an innocuous name, or even a well-meaning editor tagging a userpage, can edit the user/talk page of a hidden account, and the resulting deletion and/or protection logs reveal the hidden account name. These logs should be hidden from the start.


Version: unspecified
Severity: normal

Details

Reference
bz18383

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 10:31 PM
bzimport set Reference to bz18383.
bzimport added a subscriber: Unknown Object (MLST).
aaron added a comment.Apr 22 2009, 6:23 AM

Maybe editing of the user page by anyone should be blocked and log entries have the target hidden?

mcdevitd wrote:

Blocking edits to their userspace is a good idea. If log entries occurring after the hiding can also be automatically suppressed as they occur (I think that's what you're saying), that solves the problem. Second choice would be to, as with the edits, just prevent subsequent (un)protections/(un)deletions/(un)blocks/renames/moves on the user(space).

aaron added a comment.Apr 22 2009, 6:59 AM

Yeah, I was wondering if there is any reason to allow protect/move type events. If there is none, they can just be disallowed.

aaron added a comment.Apr 22 2009, 7:00 AM

(In reply to comment #3)

Yeah, I was wondering if there is any reason to allow protect/move type events.
If there is none, they can just be disallowed.

Well, except suppression events, like page suppression, which may come in handy and logged privately.

mcdevitd wrote:

As long as any existing pages in the userspace are automatically deleted and suppressed when the user is hidden, so it doesn't become impossible to remove them after hiding, I don't see any reason to allow such events.

aaron added a comment.Apr 22 2009, 7:33 AM

Currently, user and user talk pages and subpages are not suppressed on block.

(In reply to comment #6)

Currently, user and user talk pages and subpages are not suppressed on block.

Done in r49742; not subpages yet.

aaron added a comment.Apr 25 2009, 2:40 AM

*** Bug 18568 has been marked as a duplicate of this bug. ***

aaron added a comment.Jul 30 2009, 6:11 PM

(In reply to comment #7)

(In reply to comment #6)

Currently, user and user talk pages and subpages are not suppressed on block.

Done in r49742; not subpages yet.

Reverted btw.

There are just too many places where this info will end up popping up, and it's just too hard to *guarantee* that the name won't be findable in any form.

Restricted Application added a subscriber: JEumerus. · View Herald TranscriptAug 5 2016, 2:26 PM