# Is it a security violation to show a directory of users?

**URL:** https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557
**Category:** Feature
**Created:** [20 Marzo 2015, 12:34am UTC](https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557 "2015-03-20T00:34:36Z")
**Posts on this page:** 1
**Showing post:** 60

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [26 Marzo 2015, 3:27pm UTC](https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557/60 "2015-03-26T15:27:11Z")

</div>

Here is the functionality that @codinghorror mentioned:

[https://github.com/discourse/discourse/commit/2cc585816369afd2f1b0266615d78282a0a99ad8](https://github.com/discourse/discourse/commit/2cc585816369afd2f1b0266615d78282a0a99ad8)

The new site setting is called `enable_user_directory`

---

_[View the full topic](https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557)._