Inactive User Criteria
Explanation
"Inactive" does not mean "has not logged in recently": there is no last-login date to read, so the application infers inactivity from what an account left behind. An account is listed only when every condition below holds, and the conditions are deliberately narrow, each one being there because some category of legitimate account was being caught without it.
| Condition | Why it is there |
|---|---|
| The profile page has not been modified for the past 30 days | Excludes accounts that have only just registered. |
| The account produced no page creation, update or deletion event anywhere in the farm, apart from events on its own profile page | An account that ever edited a page is not inactive. Its own profile page does not count, because registering writes it. |
| The profile page carries no XWiki.OIDC.ConsentClass xobject | Such an account exists to authenticate against another application through the wiki, and may legitimately never touch the wiki itself. |
| The profile page carries no XWiki.WatchListClass and no XWiki.Notifications.Code.NotificationPreferenceClass xobject | Registering only in order to follow pages is a legitimate use. This does not catch every case, since watch settings are now also stored elsewhere. |
| The account owns none of the wikis of the farm | A wiki owner is never inactive. |
| The account is not a protected user | Protection applies to every AntiSpam operation, not only to this one. |
An avatar is not a criterion: a profile with a picture can be listed like any other.
The event condition is the one to be careful with, because it is answered from the event store rather than from page histories. Removing events with Review the Latest Changes for Spam or Delete Spam Pages and Users therefore makes accounts that were active in the past look inactive, and is the one way this screen can propose an account it should not.
FAQ
Where does the 30-day threshold come from?
The screen passes it to the API. It is not configurable from the user interface.
Can I see which condition an account failed?
No. The screen lists the accounts matching every condition and reports nothing per condition.
