Certain Discourse logs use user ID to identify users instead of usernames. However, it is not currently possible to look up users via ID.
- Attempting to navigate by user ID as admin fails:
discourse.example.com/admin/users/12345, it appears as though the username must be included to be routed.
- Searching by ID on the
Given that all
/admin routes are already staff only, allowing
/admin/users/user_id to route without the username shouldn’t be a security risk.