`로그 익명화 세부 정보` 설정이 사용자 이름을 완전히 익명화하지 않음

If you have checked a user’s email address before, their username stays in the staff action logs, even if Log anonymizer details is disabled.

Steps to reproduce:

  1. Disable the Log anonymizer details site setting.
  2. Open the user’s admin page.
  3. Click the “Show” button to view the email address.
  4. Anonymize the user.
  5. Look at the staff action logs.

Result: Although the setting is intended to prevent the username from being linked to the anonymized names, it is obvious because of the ‘check email’ log. I would expect the username to be anonymized in the path specified there if the setting prevents the username from being saved.

If the Log anonymizer details setting saves the username in the logs during anonymization, it does not matter that the username stay unchanged in the path.

1개의 좋아요

It’s kinda tricky / dangerous to remove stuff based on the username so I opted out to instead replace the whole context and details fields with a [removed due to user anonymization] message

https://github.com/discourse/discourse/pull/36936

3개의 좋아요

@Moin this has been merged :git_merged:

This topic was automatically closed after 46 hours. New replies are no longer allowed.

@Moin noticed I was being too lax when doing the update :man_facepalming:

https://github.com/discourse/discourse/pull/37242

1개의 좋아요

This topic was automatically closed after 3 days. New replies are no longer allowed.