Certain Discourse logs use user ID to identify users instead of usernames. However, it is not currently possible to look up users via ID.
- Attempting to navigate by user ID as admin fails:
discourse.example.com/admin/users/12345, it appears as though the username must be included to be routed. - Searching by ID on the
/admin/usersalso fails.
Given that all /admin routes are already staff only, allowing /admin/users/user_id to route without the username shouldn’t be a security risk.
