Suppress List of users for anonymous

[waltera]

Hi,
We have just started to use deki (9.02) at our institute. As we use LDAP for authentification the anonymous user can see the user names of many users that we have at our site - they are the same names as are used for general login to our site. This does not seem desirable to us as it makes attacks e.g. via ssh a bit easier. Nevertheless would we like to have some top level pages of our deki visible to the world.
Question: can the "list of users" page be allowed only for logged in users? and disallowed for an anonymous viewer?

Thanks, Walter

[SteveB]

Make sure to file a bug on this issue so we can add this as a feature in a future release. Thanks.

[Guerric]

Note: This method only disables user listing from the UI. The API is still open.

You can disable the user listing plugin by adding this to your LocalSettings.php file.

$key = array_search('special_listusers', $wgDefaultDekiSpecialPages);
if ($key !== false)
{
	unset($wgDefaultDekiSpecialPages[$key]);
}