Certain Discourse logs use user ID to identify users instead of usernames. However, it is not currently possible to look up users via ID.
- Attempting to navigate by user ID as admin fails:
discourse.example.com/admin/users/12345
, it appears as though the username must be included to be routed. - Searching by ID on the
/admin/users
also fails.
Given that all /admin
routes are already staff only, allowing /admin/users/user_id
to route without the username shouldn’t be a security risk.