Last modified: 2013-10-06 22:57:23 UTC
Dear developers. Sorry to bother again but when an account is suppressed via CentralAuth it should be [removed/hidden/grayed out] too from [[Special:ListUsers]] and, if previously blocked, from [[Special:IPBlockList]] too (like it happens when you manually block an account using the 'hideuser' option). This is not happenning now and leaks usernames with libellous or private information exposed to the public as well so we have to manually reblock the user again across the projects. Thank you.
Hello. Any updates on this? This is potentially causing privacy leaks as explained above. Scaling up to critical and CC'd Tim. Sorry for bothering but this needs urgent fixing. Thanks.
I'm not sure about that. It should remove users from user list, and it did when I commited it.
(In reply to comment #2) > I'm not sure about that. It should remove users from user list, and it did when > I commited it. Not when the user is previously blocked before we can globally suppress it. Regards.
(lowered priority as carry over from old bug triage)
Brian: This report has been in ASSIGNED status for more than one year and you are set as its assignee. In case that you are not actively working on a fix, please reset the bug status to NEW/UNCONFIRMED. In case you do not plan to work on a fix in the near future: Please also edit the "Assigned To" field by clicking "Reset Assignee to default", in order to not prevent potential contributors from working on a fix. Thanks for your help! [assigned>=1y]
