RenameUser should log out target user to prevent unwanted recreation of old username


It's fairly common that a user will request a rename usually based on a privacy concern (they used their real name, etc.).

The rename will be performed but because of (I assume) cookies and SUL and such, the account gets recreated automatically - this is usually undesirable.

Rename should perhaps force a userlogout - if possible - to avoid this happening. Or perhaps someone has a more elegant solution.

Version: unspecified
Severity: normal

bzimport added a subscriber: Unknown Object (MLST).
bzimport set Reference to bz26816.
Xeno created this task.Via LegacyJan 20 2011, 4:28 PM
hashar added a comment.Via ConduitJan 22 2011, 1:23 PM

Raised severity enhancement -> normal

bzimport added a comment.Via ConduitFeb 16 2011, 4:52 AM


Further prevention of automatic re-creation would be helpful. I wrote the following in bug 17313#C22:
"I suggest creating a way to salt the account names that request successful
renames, implementing it on English Wikipedia, and getting consensus of the
Bureaucrats there to use it."

aaron added a comment.Via ConduitOct 21 2011, 7:36 PM

This is already done, but the user_touched change isn't committed till all the job rows are inserted, which could be a quite a few seconds.

Add Comment