Page MenuHomePhabricator

RenameUser should log out target user to prevent unwanted recreation of old username
Open, MediumPublic

Description

It's fairly common that a user will request a rename usually based on a privacy concern (they used their real name, etc.).

The rename will be performed but because of (I assume) cookies and SUL and such, the account gets recreated automatically - this is usually undesirable.

Rename should perhaps force a userlogout - if possible - to avoid this happening. Or perhaps someone has a more elegant solution.

Details

Reference
bz26816
TitleReferenceAuthorSource BranchDest Branch
minor build fixesclarakosi/aqs!1clarakosibuildsmain
minor build fixesrepos/generated-data-platform/aqs/pageviews!2eevansbuildsmain
Customize query in GitLab

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 11:16 PM
bzimport set Reference to bz26816.
bzimport added a subscriber: Unknown Object (MLST).

Raised severity enhancement -> normal

RSYQFIOJGWZA wrote:

Further prevention of automatic re-creation would be helpful. I wrote the following in bug 17313#C22:
"I suggest creating a way to salt the account names that request successful
renames, implementing it on English Wikipedia, and getting consensus of the
Bureaucrats there to use it."

This is already done, but the user_touched change isn't committed till all the job rows are inserted, which could be a quite a few seconds.

IIRC globalrename on WMF projects alredy does this as well.