Page MenuHomePhabricator

Hidden accounts can still edit
Closed, InvalidPublic

Description

Author: groovedog

Description:
In CentralAuth, hiding but not locking an account still permits that account to edit. The account disappears from Special:GlobalUsers but it's still able to log in, make edits and the like (see URL). This seems as a problem, I don't really understand why anyone would hide an account's name but still allow it to appear in Recent Changes.


Version: unspecified
Severity: major
URL: http://meta.wikimedia.org/w/index.php?title=User:Mike%27s_testing_account&oldid=1736597

Details

Reference
bz21597

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 10:49 PM
bzimport set Reference to bz21597.
bzimport added a subscriber: Unknown Object (MLST).

I believe if you want the account to not edit, lock it separately. locking and hiding are different.

MarcoAurelio raised the priority of this task from Low to High.May 5 2015, 6:15 PM
MarcoAurelio moved this task from Backlog to Done on the MediaWiki-extensions-CentralAuth board.