Page MenuHomePhabricator

RenameUser should log out target user to prevent unwanted recreation of old username
Open, MediumPublic

Description

It's fairly common that a user will request a rename usually based on a privacy concern (they used their real name, etc.).

The rename will be performed but because of (I assume) cookies and SUL and such, the account gets recreated automatically - this is usually undesirable.

Rename should perhaps force a userlogout - if possible - to avoid this happening. Or perhaps someone has a more elegant solution.

Details

Reference
bz26816

Related Objects

StatusSubtypeAssignedTask
OpenNone
ResolvedNone
OpenNone
ResolvedJdforrester-WMF
ResolvedCiencia_Al_Poder
OpenNone
ResolvedSeb35
StalledNone
DeclinedNone
Resolvedmatej_suchanek
ResolvedLadsgroup
ResolvedZabe
ResolvedLadsgroup
ResolvedZabe
ResolvedZabe
ResolvedZabe
Resolvedmatej_suchanek
ResolvedLadsgroup
Resolvedmatej_suchanek
ResolvedABran-WMF
ResolvedMarostegui

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 11:16 PM
bzimport set Reference to bz26816.
bzimport added a subscriber: Unknown Object (MLST).

Raised severity enhancement -> normal

RSYQFIOJGWZA wrote:

Further prevention of automatic re-creation would be helpful. I wrote the following in bug 17313#C22:
"I suggest creating a way to salt the account names that request successful
renames, implementing it on English Wikipedia, and getting consensus of the
Bureaucrats there to use it."

This is already done, but the user_touched change isn't committed till all the job rows are inserted, which could be a quite a few seconds.

IIRC globalrename on WMF projects alredy does this as well.