# Is it a security violation to show a directory of users?

**URL:** https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557
**Category:** Feature
**Created:** [20. März 2015 um 00:34 UTC](https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557 "2015-03-20T00:34:36Z")
**Posts on this page:** 1
**Showing post:** 9

<div class="post-metadata">

### Author: ![downey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/downey/32/166878_2.png) [@downey](https://meta.discourse.org/u/downey)
#### Post date: [20. März 2015 um 00:27 UTC](https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557/9 "2015-03-20T00:27:35Z")

</div>

> [@User directory feedback](https://meta.discourse.org/t/user-directory-feedback/26550/17):
>
> using the anonymous API they can enumerate all the users.

Regular humans won’t bother doing this.

---

_[View the full topic](https://meta.discourse.org/t/is-it-a-security-violation-to-show-a-directory-of-users/26557)._
