Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Show userName as link only when a user is not removed #2516

Merged
merged 1 commit into from
Aug 20, 2020

Conversation

SIkebe
Copy link
Member

@SIkebe SIkebe commented Aug 18, 2020

Before submitting a pull-request to GitBucket I have first:

  • read the contribution guidelines
  • rebased my branch over master
  • verified that project is compiling
  • verified that tests are passing
  • squashed my commits as appropriate (keep several commits if it is relevant to understand the PR)
  • marked as closed using commit message all issue ID that this PR should correct

before

before


after

after

@aadrian
Copy link
Member

aadrian commented Aug 18, 2020

@SIkebe IMHO if the user was removed, but there are commits and other elements referenced to it's name, only the admin should be still able to see them.

The username link should be disabled for normal users, or for the admins when the users had no activity.

@SIkebe
Copy link
Member Author

SIkebe commented Aug 18, 2020

@aadrian Hmm, I consolidate the look & feel in user management page and issue/PR page.
Here's the image of a comment written by a removed user.
image

@SIkebe
Copy link
Member Author

SIkebe commented Aug 18, 2020

The username link should be disabled for normal users

Only administrators can see user management page, so this PR would not affect normal users.

@aadrian
Copy link
Member

aadrian commented Aug 18, 2020

Only administrators can see user management page,

But not the user page is linking to ! The URLs are predictable, and if someone has a link while the user existed (e.g. bookmarked), than it could still access it.

@takezoe
Copy link
Member

takezoe commented Aug 18, 2020

The username link should be disabled for normal users, or for the admins when the users had no activity.

At least, git history will be kept even after removal of GitBucket account. I don't think we should revise them.

Anyway, I think how to treat removed accounts is out of the scope of this pull request.

@aadrian
Copy link
Member

aadrian commented Aug 18, 2020

@takezoe

At least, git history will be kept even after removal of GitBucket account. I don't think we should revise them.

Of course not.

But if a user has been disabled (and not purged), and had activity, only the admin should be able to see the "user" page with that activity.

I think how to treat removed accounts is out of the scope of this pull request.

OK.

@takezoe takezoe added this to the 4.35.0 milestone Aug 18, 2020
@SIkebe
Copy link
Member Author

SIkebe commented Aug 19, 2020

As @aadrian said, more granular management of activities or a feature like GitLab's Audit Events would be useful, for sure.
https://docs.gitlab.com/ee/administration/audit_events.html

I just wanted to remove useless link in this PR.

@takezoe takezoe merged commit a6063c8 into gitbucket:master Aug 20, 2020
@takezoe
Copy link
Member

takezoe commented Aug 20, 2020

Let's consider treatment of removed accounts as another dedicated topic.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging this pull request may close these issues.

None yet

3 participants