`Log anonymizer details` setting not fully anonymizing usernames

If you have checked a user’s email address before, their username stays in the staff action logs, even if Log anonymizer details is disabled.

Steps to reproduce:

  1. Disable the Log anonymizer details site setting.
  2. Open the user’s admin page.
  3. Click the “Show” button to view the email address.
  4. Anonymize the user.
  5. Look at the staff action logs.

Result: Although the setting is intended to prevent the username from being linked to the anonymized names, it is obvious because of the ‘check email’ log. I would expect the username to be anonymized in the path specified there if the setting prevents the username from being saved.

If the Log anonymizer details setting saves the username in the logs during anonymization, it does not matter that the username stay unchanged in the path.

1 Like

It’s kinda tricky / dangerous to remove stuff based on the username so I opted out to instead replace the whole context and details fields with a [removed due to user anonymization] message

2 Likes