Mark A. Hershberger wrote:
23126 Locked and hidden accounts can unify new local
accounts
https://bugzilla.wikimedia.org/23126
Tim says this is apparently a deliberate chage, and later
comments leave me confused: should this be closed or the fix
for this bug reverted?
Now creation logs are not shown for autocreated accounts, which is what
comment 11 complains about, so it may be fixed. I would open a new bug
if locked accounts can use Special:EmailUser.
19161 Auto account creation creates privacy
vulnerability
https://bugzilla.wikimedia.org/19161
I think this one is fixed but I'm relying on you to help me
determine what, if anything, still needs to happen. This is
refered to in #23126 as well.
This is currently fixed as the account creation does not appear in the
logs (although smart users could still find the log), and the ability of
disabling global login.
However, it's not clear if those measures will be undone.
These are very linked with bug 27287, which requests to have creation
logs again, and could reopen them.
https://bugzilla.wikimedia.org/show_bug.cgi?id=27287
Perhaps the account creation log should perform an union of local tables
and centralauth ones.