Confluence REST API shows username even though hiding people directory option is turned on

Summary

1. We have a workaround to to disable the People Directory entirely (steps provided here)
   • Enabling this will hide user name and their email address entirely
2. However, even with the setting enabled, REST API endpoint will still show users username and emails

Steps to Reproduce

1. Disable people directory by enabling the following system argument:

   -Dconfluence.disable.peopledirectory.all=true
   

   Access the following:

   <base/rest/dashboardmacros/1.0/updates?maxResults=40&tab=all&showProfilePic=true&labels=&spaces=&users=&types=&category=&spaceKey=
   

Expected Results

Last Modifier's details (such as email and full name) should not be displayed due to the system argument has been set

Actual Results

Last Modifier's details (such as email and full name) are displayed

Notes

Using the system argument, the Last Modifier's details (such as email and full name) would not be displayed in the UI