As protection against certain problematic users who are creating a lot of alt accounts with inappropriate and abusive usernames, I have turned on the setting marked “Staff must approve all new user accounts before they are allowed to access the site.”
However, even though I haven’t yet approved a particular account, that account is still listed as an option when e.g. sending messages or during “@username” autocompletes, and hence is visible to other users.
Is this intended behaviour? I would expect that unapproved accounts are kept isolated from the rest of the users.
In any case, how can I prevent these usernames from prematurely appearing anywhere in the forum before they have been approved?
Thank you, but that would create more problems for me than it solves. I’d much rather handle this within Discourse.
The more I think about this, the more it seems like a bug. I seem to recall Invision Power Board having the same issue a few years ago, but they have since fixed it.