# Users full name are shown in preview even with "enable names" off
**URL:** https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386
**Category:** Bug
**Created:** [22 במרץ, 2019, 11:11pm UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386 "2019-03-22T23:11:45Z")
**Posts on this page:** 12
**Page:** 1
### Author:  [@wire](https://meta.discourse.org/u/wire)
#### Post date: [22 במרץ, 2019, 11:11pm UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/1 "2019-03-22T23:11:46Z")
Is this a bug?
When doing a post or a new thread, just in an ordinary manner and pasting in a user profile URL like this:
`http://www.FORUMURL.com/u/NICKNAME/summary`
The users real name will show up in the preview pane to the right. Of course, this is a massive privacy breach for us and need to sorted out ASAP.
Any idea on why this is happning? The develop console shows this in the document:
`XXX`
Any idea on what is happening or how to fix this?
Thank you.
---
### Author:  [@simon](https://meta.discourse.org/u/simon)
#### Post date: [22 במרץ, 2019, 11:45pm UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/2 "2019-03-22T23:45:47Z")
When `enable names` is disabled, and users have supplied a full name, the full name shows up when links to the user’s profile are oneboxed. The setting’s description says “Disable to hide full name everywhere”, so this seems like a bug.
---
### Author:  [@wire](https://meta.discourse.org/u/wire)
#### Post date: [23 במרץ, 2019, 12:22am UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/3 "2019-03-23T00:22:06Z")
Thank you for your answer. To clarify: I have not checked that setting, and still the usernames are shown in the card. So, yes, this seems like an unpleasant bug.
---
### Author:  [@wire](https://meta.discourse.org/u/wire)
#### Post date: [23 במרץ, 2019, 9:37am UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/4 "2019-03-23T09:37:02Z")
@simon I need to push this further, as it’s a very bad privacy breach.
Are you saying that this is a bug which will be fixed anytime soon? Or, are you saying that the setting “enable names” need to be checked (in other words: the semantics are reversed) to fix this?
---
### Author:  [@venarius](https://meta.discourse.org/u/venarius)
#### Post date: [23 במרץ, 2019, 10:17am UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/5 "2019-03-23T10:17:49Z")
I will take a look at it
---
### Author:  [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [23 במרץ, 2019, 11:33am UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/6 "2019-03-23T11:33:48Z")
Unless you’re using SSO (and passing the name across without knowledge or consent of the user) it’s arguably not a privacy breach because they provided this at account creation for their profile.
I can understand that it’s unexpected and deviates from the expectations set out by the option to prevent usernames or names, but that isn’t the same thing.
Discourse isn’t really the place for private or sensitive information. If you’re really worried about the names of users getting “out” drop into the rails console and remove them from the database.
---
### Author:  [@wire](https://meta.discourse.org/u/wire)
#### Post date: [23 במרץ, 2019, 12:21pm UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/7 "2019-03-23T12:21:40Z")
Full names are passed off of another system, but it’s strange that the name is placed in a span with the fitting name “full-name”. Doesn’t that implicitly mean that it should be disabled in Discourse? “enable names” setting is not checked in settings.
No matter what, I think it’s a “nobrainer” that admins should have a capability to hide the users full name, even if it’s inserted by the user or not.
It’s difficult to diagnose the cause of this, so any help is appreciated 🙂
---
### Author:  [@simon](https://meta.discourse.org/u/simon)
#### Post date: [23 במרץ, 2019, 5:55pm UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/8 "2019-03-23T17:55:44Z")
> [@wire](#):
>
> Are you saying that this is a bug which will be fixed anytime soon?
Yes, it is a bug and will be fixed. Thanks for reporting it!
---
### Author:  [@wire](https://meta.discourse.org/u/wire)
#### Post date: [23 במרץ, 2019, 8:20pm UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/9 "2019-03-23T20:20:10Z")
Good. Looking forward to this update. ETA?
---
### Author:  [@venarius](https://meta.discourse.org/u/venarius)
#### Post date: [23 במרץ, 2019, 8:38pm UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/10 "2019-03-23T20:38:19Z")
@wire Opened a PR 🙂
[https://github.com/discourse/discourse/pull/7245](https://github.com/discourse/discourse/pull/7245)
---
### Author:  [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [25 במרץ, 2019, 7:24am UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/11 "2019-03-25T07:24:17Z")
PR is merged. Thanks @venarius ❤
@wire updating to latest version will fix this issue.
---
### Author:  [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [25 במרץ, 2019, 7:24am UTC](https://meta.discourse.org/t/users-full-name-are-shown-in-preview-even-with-enable-names-off/112386/12 "2019-03-25T07:24:54Z")