# Disabling "enable names" makes admin act strange

**URL:** https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912
**Category:** Bug
**Created:** [January 17, 2024, 7:44am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912 "2024-01-17T07:44:29Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![RGJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rgj/32/523185_2.png) [@RGJ](https://meta.discourse.org/u/RGJ)
#### Post date: [January 17, 2024, 7:44am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/1 "2024-01-17T07:44:29Z")

</div>

Disabling `enable_names` setting removes the full name everywhere in the GUI.  
Except from the administrator view - so far so good.  
It seems to work, but it does not.

- at first the name does not appear
- you can edit it
- it then appears but is never saved

See video

Version: tests-passed as of this morning.

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [April 21, 2024, 9:00pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/2 "2024-04-21T21:00:52Z")

</div>

When editing a user in the admin menu. Changing user **Name** saves but upon refresh nothing was saved.

 ![Screenshot_20240421-175853](https://global.discourse-cdn.com/meta/original/4X/c/e/6/ce65b727ce6fa2155ea7c13dcc18c226bba11995.jpeg)

See no name in **Name**

Edit & save. Refresh page no name saved as per above pic.

Running Tests Passed up to date.

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [April 21, 2024, 9:09pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/3 "2024-04-21T21:09:27Z")

</div>

Is the `enable names` setting enabled?

> [@Disabling "enable names" makes admin act strange](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912):
>
> Disabling enable\_names setting removes the full name everywhere in the GUI. Except from the administrator view - so far so good. It seems to work, but it does not. at first the name does not appear you can edit it it then appears but is never saved See video Version: tests-passed as of this morning.

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [April 21, 2024, 9:19pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/4 "2024-04-21T21:19:25Z")

</div>

No not enabled. So recent bug. @JammyDodger can you merge this topic with Richards?

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [April 21, 2024, 9:26pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/5 "2024-04-21T21:26:39Z")

</div>

> [@Heliosurge](#):
>
> So recent bug

I’m not sure it’s recent

> [@Make Full Name accessible in admin view when "enable names" is off](https://meta.discourse.org/t/make-full-name-accessible-in-admin-view-when-enable-names-is-off/147781/3):
>
> I think always displaying the value of the Name field on the user’s admin page is a good idea. There is also a UX issue with the way the Name field is currently displayed on the user’s admin page when enable names is disabled. The name field can be edited, but it is always displayed as empty: Always displaying the name in that field if it has been set would solve that issue.

---

<div class="post-metadata">

### Author: ![Arkshine](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/arkshine/32/298682_2.png) [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [April 21, 2024, 9:34pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/6 "2024-04-21T21:34:44Z")

</div>

An admin should be able to see and update the name regardless of the `enable_names` setting. 🤔

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [April 21, 2024, 10:54pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/7 "2024-04-21T22:54:05Z")

</div>

Well new enough as hadn’t noticed this change in behavior until t gently.(Even though it looks like issue was first maybe reported 4 years ago?)

Richard’s post from January.

Granted the 2 forums I have in use is 4 years & 7 years.

So likely why hasn’t noticed it when it did change as not often changing/fixing details for a user.

It seems like they maybe need to add a setting? So name is enable and the choice to display globally or not

As mentioned in the discussion you linked full name should be minimally displayed to user and admin.

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [July 12, 2024, 12:00am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/8 "2024-07-12T00:00:50Z")

</div>

Bump

* * *

 ![Screenshot_20240711-204526](https://global.discourse-cdn.com/meta/original/4X/7/8/9/789e8cca3d7ccfdc9963808a1e9cd80a4e012c60.png)

Admin should be able view Name Feild content. The pic shows my account but even editing this Field and saving. It blanks on a refresh.

~~I was sure we discussed this earlier but had trouble finding via search terms.~~

Only site setting is to unhide and add to all site areas displayed.

Admin should always be able to view this user Field. And imho this detail should also show in user preferences menu “Account” as it is part of their account details.

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [July 12, 2024, 12:16am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/9 "2024-07-12T00:16:44Z")

</div>

Okay have found the setting @Moin mentioned doesn’t populate it for everyone. Just the current user on their card.

Enabled names works. ~~But any info users enter prior in that field is blank~~ ok some didn’t populate that field. Mystery solved.

Might need to clarify this setting better. Imho it should be on by default.

---

<div class="post-metadata">

### Author: ![Lhc\_fl](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lhc_fl/32/268115_2.png) [@Lhc\_fl](https://meta.discourse.org/u/Lhc_fl)
#### Post date: [July 12, 2024, 8:14am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/12 "2024-07-12T08:14:04Z")

</div>

I found out the reason is

```runy
class BasicUserSerializer < ApplicationSerializer
  # ...
  def include_name?
    SiteSetting.enable_names?
  end

```

There is no special judgment on the admin.

But I am curious, what should it be changed to? Can the moderator change the user’s name? or just the admin? 🤔

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [July 12, 2024, 8:21am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/13 "2024-07-12T08:21:23Z")

</div>

> [@Lhc\_fl](#):
>
> Can the moderator change the user’s name?

I think so

> <https://github.com/discourse/discourse/blob/f75dd1b43a4d4f2f479f81890be65decb58ea105/lib/guardian/user_guardian.rb#L43>

---

<div class="post-metadata">

### Author: ![Lhc\_fl](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lhc_fl/32/268115_2.png) [@Lhc\_fl](https://meta.discourse.org/u/Lhc_fl)
#### Post date: [July 12, 2024, 8:25am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/14 "2024-07-12T08:25:02Z")

</div>

I’m just wondering if moderators should be affected by the “hide everywhere” of description… maybe they shouldn’t be able to see name, even in the admin panel?

 ![image](https://global.discourse-cdn.com/meta/original/4X/2/3/d/23d9fbf870290694288ce87ea75b8f74881bb83b.png)

upd: According to this description, the administrator should not be able to see it either

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [July 13, 2024, 10:11pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/15 "2024-07-13T22:11:19Z")

</div>

I would suggest Making it a toggle for full moderators. Admin though as discussed should always be able to see this Feild.

After enabling names though it breaks privacy as it now includes real name in emails. Unless there is an additional setting? Couldn’t find one after a member reported real names are in the email notifications instead of just user handle.

Ie a email to user from a reply from me sent real name in email.

> [@Lhc\_fl](#):
>
> upd: According to this description, the administrator should not be able to see it either

Then if this hides the Feild from all it should disable using that Feild as even the member cannot view that detail.

Stable branch forum I also look after is not affected by the change in behavior discussed here.

---

<div class="post-metadata">

### Author: ![Heliosurge](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/heliosurge/32/571810_2.png) [@Heliosurge](https://meta.discourse.org/u/Heliosurge)
#### Post date: [July 14, 2024, 10:32pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/16 "2024-07-14T22:32:43Z")

</div>

Where can I fix the email so it is not sending real names and use the user name instead?

And what CSS would I use to have it only show to the current user their own real name on the user card?

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [July 16, 2024, 10:56am UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/17 "2024-07-16T10:56:39Z")

</div>

I think moderators can also see and edit custom user fields where ‘editable after signup’ and ‘show on public profile’ are disabled. In that case, the user cannot see their own field, but moderators can. Perhaps it would be consistent if the name field behaved in the same way.

> [@Lhc\_fl](#):
>
> According to this description, the administrator should not be able to see it either

Then the description could be changed. For example:

> Show the user’s full name to everyone on their profile, user card, and emails. If disabled, the full name will be shown only to staff members on the user’s profile.

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [July 19, 2024, 6:33pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/18 "2024-07-19T18:33:40Z")

</div>

Thanks, Richard! I am able to repro the issue you are reporting, and we’ll get that fixed up. 👍 Admins should always be able to see and manage the name of users, even if it is not shown in various places in the forum.

As regards the rest of this conversation, I can see there is some more work to be done to bring together these settings and make it easier to understand. I’ll add that to our list to investigate further.

In the meantime, I made a small [PR](https://github.com/discourse/discourse/pull/27991) to remove that ambiguous language in the description of the `enable names` site setting.

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [August 21, 2024, 9:13pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/21 "2024-08-21T21:13:58Z")

</div>

I think it’s worth picking this apart and identifying the decisions we have to make and then create multiple todos. I will assign to myself to try to figure it out.

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [September 30, 2024, 12:25pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/25 "2024-09-30T12:25:00Z")

</div>

There appear to be three action items for this topic:

1. always allow admins to see and edit the user’s full name, even when `enable_names` site setting is disabled
2. do not include full name of user in emails when `enable_names` site setting is disabled
3. change the `enable_names` site setting description to indicate it is not a security feature. Admins and moderators can see it, and those familiar with .json can also find it. If sites want to allow users to have anonymity, they should not be putting their real name in the name field.

We are going to look into (1) and (2).

As for (3) we need to find better language that is not ambiguous, and link to a documentation topic here on meta for fuller details. Something like this?

> Show full name of members on profiles, user cards and in emails. Note this is not a security feature. Admins and mods can always still see names, and they also can be discovered via .json. Learn more

---

<div class="post-metadata">

### Author: ![mdoggydog](https://avatars.discourse-cdn.com/v4/letter/m/82dd89/32.png) [@mdoggydog](https://meta.discourse.org/u/mdoggydog)
#### Post date: [February 26, 2025, 5:55pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/26 "2025-02-26T17:55:04Z")

</div>

I have started working on an implementation of [Restrict exposure of full name to certain groups](https://meta.discourse.org/t/restrict-exposure-of-full-name-to-certain-groups/348873), and just came across this topic, which completely intersects with what I am trying to do.

My approach is to replace `SiteSetting#enable_names` with a new `Guardian#can_see_full_names?`, in the appropriate contexts. This new guardian predicate checks the user context against a new site setting, `full_names_visible_to_groups`.

I don’t want to inadvertantly step on any toes (or duplicate any work) — are there any updates to the status/planning for (1)/(2)/(3)/etc above, and is there any unpublished (i.e., not in `main` repo) work/code that I should be aware of?

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [February 26, 2025, 7:14pm UTC](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912/27 "2025-02-26T19:14:07Z")

</div>

(1) and (2) are on our list but have not yet been prioritized or worked on yet. (3) seems a good idea but we haven’t made that change yet either.

Your implementation is not bad, but maybe hang fire for a sec to give the engineer on that team a chance to respond here.

A product question for you though.. why are you seeking to give some groups access to full names and not others? Can you explain your use case in some more detail?

[Next page](https://meta.discourse.org/t/disabling-enable-names-makes-admin-act-strange/291912.md?page=2)
