Does not work when logged out: https://meta.discourse.org/u?exclude_groups=admins&order=likes_received Logged out: [image] Logged in: [image] I stumbled across this because I noticed when logged out of my own forums, I’m no longer excluded from users sorted by likes received. Is this delibe…

[이미지] haydenjames: Was able to at least remove admin user from off the homepage’s Right Sidebar Blocks plugin with just CSS. .top-contributors--user:has([data-user-card="admin_username"]) { display: none; } Ok so was able to achieve the result that I needed for both the front page si…

[이미지] haydenjames: :slight_smile: A LOT of them do. Most that I visit Yeah that’s certainly true. But when it comes to security features, we have to design things to work precisely as they’re described. If someone decides to hide group membership, that needs to work 100% reliably.

[이미지] haydenjames: For context, all I’m actually trying to achieve is in the sidebar plugin there’s a ranking, and I just don’t want the admins group included in the “most likes received” or top contributors list. Why don’t you change the visibility of the admin group and its members to “ever…

The thing is, hiding membership isn’t really reliable here anyway. On a lot of forums, mine included, the admins are some of the most active users. So you can just sort the directory by activity and usually spot an admin or two right away. The admin group membership is easily deduced from exposed a…

I do see your point, but it’s important to consider that the group security system is not specific to the @admins group. The same security model would need to work for the @super-secret-lurkers group, if a forum had one :wink: Being able to work out ‘not in a group’ is ultimately the same as being …

[이미지] david: Does updating the admins group to be visible to ‘everyone’ work for you? No I tried that before opening. Thought maybe non-members had to be able to see the group for the exclusion to work. :confused: But no, /u?exclude_groups=admins is ignored entirely for unregisted visitors.

It is not about hiding the users, but hiding the information about who is a member of a group. That’s why you can see the members of a hidden group in the directory, but you cannot see the group’s page. You know the user exists, but you don’t know if they belong to a secret group. For example, you …

[이미지] haydenjames: No I tried that before opening. Thought maybe non-members had to be able to see the group for the exclusion to work. :confused: But no, /u?exclude_groups=admins is ignored entirely for unregisted visitors. Oh ok! Well that sounds like it could be a bug then. Just confirmin…

You can already see who’s in the admins @Moin when logged out. Not everyone all at once. not logged in: [image] But that was not my issue here about secrecy or security:

No I only toggled the “Who can see this group’s members?” I don’t want the “Who can see this group” enabled because that allows the /g/admins public accessed. But I can test to test to see if it causes /u?exclude_groups=admins to be honored. brb

[이미지] david: Just confirming: you’ve set both group visibility and group member visibility to ‘everyone’? [SCR-20260609-tpeq] Confirmed both set to “Everyone” causes /u?exclude_groups=admins to be honored. But then also allows /g/admins to be assessed by those not logged in. Thanks. I wil…

사용자 디렉터리와 상위 기여자에서 관리자 사용자를 숨기기

지원

david (David Taylor) 6월 9, 2026, 9:41오후 21

아, 알겠습니다! 그렇다면 버그일 수도 있겠네요.

확인차 묻습니다: 그룹 표시 설정 그리고 그룹 멤버 표시 설정을 모두 '모두’로 설정해 두셨나요?

글		댓글	조회수
Is it a security violation to show a directory of users? Feature	58	7649	3월 26, 2015
Respect the visibility settings of all automatic groups Feature groups	14	936	10월 23, 2023
New category permission - "cannot see"/"exclude" Feature	36	4780	9월 4, 2024
User directory feedback Feature	82	9561	6월 7, 2015
Make groups invisible to the public Support	24	4610	1월 16, 2022

사용자 디렉터리와 상위 기여자에서 관리자 사용자를 숨기기

Related topics