Features / Usability

There is a $user variable made available to Smarty. you can pass that probably in a custom module would be better for security reasons.

however, what would stop someone passing a hard coded user directly on the address bar?