20

Despite the message:

Note: only content you own is returned when searching for deleted content

I'm able to search a specific user's deleted content using a search query such as:

user:X deleted:1

Where X is the user ID:

s1

As far as I know not even 10K+ users should be able to do this.

  • 4
    Whoa. That's a HUGE bug. Reminds me of this one – Shadow Wizard Dec 9 '15 at 14:28
  • @ShadowWizard Yup. It seems like the expected behavior of each is straight swapped with the other. – kos Dec 9 '15 at 14:34
  • Actually, it's only a 10k privilege to begin with, see here. <10k users should just see the ordinary search results, as if "deleted:1" is the search string. – Shadow Wizard Dec 9 '15 at 14:39
  • @ShadowWizard I have 10K+ on that site, that's apparently not a problem, the second user (10K-) can't even search his own. – kos Dec 9 '15 at 14:42
  • 2
    True, like I said the ability to search your own deleted content is a 10k privilege, so that part is not a bug – Shadow Wizard Dec 9 '15 at 14:45
  • @ShadowWizard Ah my bad, I misread your comment: I took that part down. – kos Dec 9 '15 at 14:49
  • Cheers, took it out of title as well now. :) – Shadow Wizard Dec 9 '15 at 14:50
  • @ShadowWizard Thanks, obviously I forgot about the title :) – kos Dec 9 '15 at 14:55
  • And... it's fixed here on MSE. Now you can put anything as user:[id] but you'll get only results for your own. – Shadow Wizard Dec 9 '15 at 14:59
  • 7
    As far as I know not even 10K+ users should be able to do this. Goddamnit, thanks for spilling the beans. – Won't Dec 9 '15 at 15:00
  • @Won't Yeah I know. Downvoting is legit here. :D – kos Dec 9 '15 at 15:06
  • Maybe you should create another bug report... – Braiam Dec 16 '15 at 0:34
  • I agree with @Braiam that's worth a new bug report – Shadow Wizard Dec 16 '15 at 15:15
  • @Braiam Moved the new issue to this post – kos Dec 16 '15 at 15:24
  • @ShadowWizard Moved the new issue to this post – kos Dec 16 '15 at 15:24
15

A fix will be deploying shortly - there's an args parsing race I hadn't considered here when locking down the user scope.

  • 13
    Too bad. Can I post a feature request to restore this? ;) – Patrick Hofman Dec 9 '15 at 14:53
  • @Pat you'll have better chance by nominating yourself to become moderator, or better yet - hired to SE team and get diamonds all around. :-D – Shadow Wizard Dec 9 '15 at 14:55
  • Let's get me a diamond! :) – Patrick Hofman Dec 9 '15 at 14:55
  • Aw, that's too bad. – Adam Davis Dec 9 '15 at 15:02
  • 1
    Well, just for fun I tried deleted:all...and that shows the user's deleted post among the non-deleted posts. – kos Dec 16 '15 at 0:15
  • I was suggested to create a new post for this new issue; you can follow up on the new post here – kos Dec 16 '15 at 15:28
  • 1
    Okay, but now I can't see my deleted posts where I don't have 10k. Is it by design? – nicael Dec 20 '15 at 18:30
  • Why a user cannot see his deleted posts? What is the reason that SO is making decisions for the user and hides his owns posts? Do you see a chance at least the own deleted posts remain visible? – Al Bundy May 7 '18 at 16:32

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .