# Show emails should "reset" on new searches in the admin user list

**URL:** https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649
**Category:** Feature
**Created:** [12월 22, 2017, 10:55오후 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649 "2017-12-22T22:55:13Z")
**Posts on this page:** 19
**Page:** 1

<div class="post-metadata">

### Author: ![Biscuit](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/biscuit/32/94482_2.png) [@Biscuit](https://meta.discourse.org/u/Biscuit)
#### Post date: [12월 22, 2017, 10:55오후 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/1 "2017-12-22T22:55:14Z")

</div>

If you search for a specific user and reveal their email address, it shows just their email address and mentions this in the logs. That’s fine.

Now, if you need to lookup another user and use the search box on the same screen, if multiple users are in the results, they all appear with their personal email address showing. And the logs mention that multiple email addresses were looked up.

In summary:

**Intention -** Look up two individual email addresses.

**Actual Results**

1. Logs show that many addresses were looked up.
2. Multiple users had their personal emails displayed unnecessarily.

**Suggestions**

1. Searching for user(s) should turn off “show email address” before completing the search.
2. “Check email” in the logs should say “Check email address” as it currently incorrectly implies reading of PMs. This was raised by someone in an earlier thread, but it’s still misleading.

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [12월 22, 2017, 11:34오후 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/2 "2017-12-22T23:34:36Z")

</div>

I’ve seen this when going from an Admin User page to the members Profile. But because it was the same account I didn’t think much of it.

Your talking about going to a page other than the Profile?

---

<div class="post-metadata">

### Author: ![Biscuit](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/biscuit/32/94482_2.png) [@Biscuit](https://meta.discourse.org/u/Biscuit)
#### Post date: [12월 22, 2017, 11:48오후 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/3 "2017-12-22T23:48:18Z")

</div>

I’m referring to this page:

https://**[website]**/admin/users/list/active

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [12월 22, 2017, 11:57오후 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/4 "2017-12-22T23:57:02Z")

</div>

Can you repro this @jomaxro?

---

<div class="post-metadata">

### Author: ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)
#### Post date: [12월 23, 2017, 12:25오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/7 "2017-12-23T00:25:26Z")

</div>

Yes, if you click the ‘show emails’ button on an admin/users/list tab (active, new, etc.) after entering a username in the search box, email address will continue to be shown and logged on subsequent searches.

 ![30 PM](https://global.discourse-cdn.com/meta/original/3X/f/a/fad6591b0bbaf9ad6ecac09ecea78d747568c477.png)

After having clicked Show Emails on the previous search result:

 ![11 PM](https://global.discourse-cdn.com/meta/original/3X/b/1/b1a1bb3ab223cde8e59af2a5a3012339cb063ed6.png)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [12월 23, 2017, 12:28오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/8 "2017-12-23T00:28:29Z")

</div>

Isn’t this by design, so you don’t have to press the button over and over? I view this as an intentional feature @Biscuit.

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [12월 23, 2017, 12:37오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/9 "2017-12-23T00:37:23Z")

</div>

You can show email address for the entire list with Show Emails. I think the concern was about filtering to a single account expecting it to be a one-time single account reveal rather than a page level toggle that persisted. Going away from the list to look at a single email address does not do this

---

<div class="post-metadata">

### Author: ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)
#### Post date: [12월 23, 2017, 12:38오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/10 "2017-12-23T00:38:05Z")

</div>

The problem I see with the button is that it doesn’t give you an indication of its state after you have clicked it. There is no clear option for undoing the ‘show email’ state. And while you are searching it keeps logging that you are viewing email addresses. A Show Emails checkbox would be a lot clearer.

---

<div class="post-metadata">

### Author: ![Biscuit](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/biscuit/32/94482_2.png) [@Biscuit](https://meta.discourse.org/u/Biscuit)
#### Post date: [12월 23, 2017, 1:03오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/11 "2017-12-23T01:03:11Z")

</div>

Agree - a checkbox would be an improvement. But even this could be overlooked as people (like myself) may be expecting a single user to appear in the results - and be surprised when a page of email addresses appears.

My preference is to error on the side of (a) respecting people’s privacy & (b) not logging the moderator as an email snoop. Therefore, I’d rather see the results and then choose whether to display the personal / private email addresses.

My ideal outcome would be:

1. Have a checkbox to show/hide email addresses &
2. Don’t show email addresses automatically after a search.

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [12월 23, 2017, 1:06오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/12 "2017-12-23T01:06:25Z")

</div>

This is currently possible with extra clicks. Instead of clicking Show Emails from the list, click the avatar or membername, show the email address, then go back to the list.

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [12월 23, 2017, 2:20오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/13 "2017-12-23T02:20:08Z")

</div>

Or make it a toggle button - “Showing Emails” with another press to disable. With that setup, it should be obvious what’s happening after a single mistake.

---

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [12월 23, 2017, 4:01오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/14 "2017-12-23T04:01:47Z")

</div>

Yeah, this sounds more like a process problem.

Staff needs to understand “Show Emails” adds the email addresses to the user list display. Maybe we could leave it onscreen and changed to “Emails Visible” so it could potentially be changed back.

But the biggest thing is the staff needs to understand that to see a single user’s email thats best done from the user card or user info page. That’s a process training issue.

---

<div class="post-metadata">

### Author: ![Biscuit](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/biscuit/32/94482_2.png) [@Biscuit](https://meta.discourse.org/u/Biscuit)
#### Post date: [12월 23, 2017, 4:29오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/15 "2017-12-23T04:29:04Z")

</div>

This probably sounds pedantic, but I view it as a “privacy” and “incorrect auditing” issue.

I use those words, because calling it a “process” issue doesn’t fully convey what’s happening. I felt quite uncomfortable about entries in the log suggesting email snooping.

Agree that process training is a factor.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [12월 23, 2017, 4:30오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/16 "2017-12-23T04:30:52Z")

</div>

If you are so concerned why not simply hide the button using CSS?

---

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [12월 23, 2017, 4:39오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/17 "2017-12-23T04:39:12Z")

</div>

> [@Biscuit](#):
>
> incorrect auditing … suggesting email snooping

The button is labelled “Show Emails”. It shows the emails for the (possibly filtered) users. It records this fact in the “Staff Actions” log with details about which users were shown.

The log entries don’t suggest anything about snooping - they are neutral and convey only the facts of what happened.

That’s the nature of an audit trail, it gives the facts around what happened, not _why_ the actions were taken. Audit trails are (usually) examined after an incident occurs to determine the exposure (e.g. whose email addresses did the rogue admin see?).

Whereas if the audit trail is being proactively examined and reported on in a more tightly controlled environment (where staff must justify their actions), then I would certainly expect there to be formal training for the moderation staff on correct processes to follow to ensure that more information is not exposed than intended when an action is taken.

---

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [12월 23, 2017, 4:59오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/18 "2017-12-23T04:59:59Z")

</div>

> [@Biscuit](#):
>
> But even this could be overlooked as people (like myself) may be expecting a single user to appear in the results - and be surprised when a page of email addresses appears.

Going back and re-reading the earlier posts you made on this in context of the further discussion, does the following change reflect what you’re asking for?

> Modify the **Show Emails** behaviour such that emails are ONLY shown until the search changes, then they become hidden again.

---

<div class="post-metadata">

### Author: ![Biscuit](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/biscuit/32/94482_2.png) [@Biscuit](https://meta.discourse.org/u/Biscuit)
#### Post date: [12월 23, 2017, 5:17오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/19 "2017-12-23T05:17:57Z")

</div>

Yep, that’s it, exactly Michael.

When I start a new search, it feels like starting over. That’s what I’m used to from other sites.

Background info - I can’t hide the button, as I’m a moderator (not an admin), which is also the reason I didn’t like the logs showing checking of multiple emails, when that wasn’t my intention.

Noone’s mentioned the “show emails” Vs “Show email address” point in the replies, but I think that would be an easy change to clarify.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [12월 23, 2017, 7:07오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/20 "2017-12-23T07:07:36Z")

</div>

> [@supermathie](#):
>
> Modify the Show Emails behaviour such that emails are ONLY shown until the search changes, then they become hidden again.

Sure, that is a pretty much a bug and we should fix it.

---

<div class="post-metadata">

### Author: ![Ubik](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ubik/32/89095_2.png) [@Ubik](https://meta.discourse.org/u/Ubik)
#### Post date: [2월 7, 2018, 2:12오전 UTC](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/21 "2018-02-07T02:12:31Z")

</div>

> [@Biscuit](#):
>
> Now, if you need to lookup another user and use the search box on the same screen, if multiple users are in the results, they all appear with their personal email address showing.

This happened to me a few days ago.

> [@supermathie](#):
>
> But the biggest thing is the staff needs to understand that to see a single user’s email thats best done from the user card or user info page. That’s a process training issue.

That won’t always provide a solution because there is often good reason to use the search box.

My situation: I had just suspended a troll who had one common IP address across several accounts.

I entered the IP address in **Admin \> Users** search box and hit **Show Emails** to check whether there were any common points between email addresses, to help ID him next time by checking any suspicious new signups (he switches naming style & IP pretty effectively, but only when he realises it’s necessary).

I then went to backspace the IP from the search box in order to enter the other last-known membername he had, because this:

> [@Biscuit](#):
>
> When I start a new search, it feels like starting over. That’s what I’m used to from other sites.

Clearing the search box showed emails for all currently active users, just like the full list sorted by **Last Seen** at **Admin \> Users** and illustrated [here](https://meta.discourse.org/t/show-emails-should-reset-on-new-searches-in-the-admin-user-list/76649/7).

Began typing in name of one of his earlier accounts, call it Troll-1.

While typing that, all members who share T and Tr and Tro and Trol (etcetera) in their **Name** , **Username** , and email addresses, a largish number on the forum, were also being updated with each character typed.

Like a lot of forums (example posted by someone [here](https://meta.discourse.org/t/addressing-gender-balance-in-online-communities/74917/7)) many of our users have certain common words significant to the forum’s topic within their **Name** , **Username** , or email.

Sometimes there is a case for running searches on a name liked by the troll to see how many members share them, before hitting **Show Emails** - but without wishing to go in and out of that page to clear it.

For a moderator who’s attempting to eradicate a troll but otherwise pressed for time (many of us are volunteers), having to go in and out of the same page _just to close the displaying of emails_, when they otherwise need to check several accounts with a common link, that is not ideal.

> [@supermathie](#):
>
> > Modify the **Show Emails** behaviour such that emails are ONLY shown until the search changes, then they become hidden again.

This would solve the problem and remove the need to spend time going in and out of the same page whilst investigating the same person. 👍
