This is still happening. I think there was a task for it already that got solved (T647). However, due to T87135 this still happens quite frequently.
E.g. T104164 was created June 29th. And July 12th a change was made to the CC-list (the first change to that task) . That change resulted in an IRC notification. Presumably because the CC-filter didn't work as the event also also contained a "set Security to None." component.
2015-07-12 11:51:18,623 - wikibugs.wb2-phab - DEBUG - get_transaction_info(104164,OrderedDict([('PHID-XACT-TASK-wb3glbgrmvzsfpf', 'PHID-XACT-TASK-wb3glbgrmvzsfpf'), ('PHID-XACT-TASK-2bgwvcst6bllpur', 'PHID-XACT-TASK-2bgwvcst6bllpur')])) = {"core:customfield": {"new": "default", "old": null}, "core:subscribers": {"new": ["PHID-USER-sai77mtxmpqnm6pycyvz", "PHID-USER-hgn5uw2jafgjgfvxibhh", "PHID-USER-doeppszazlm3r7xah4il"], "old": ["PHID-USER-sai77mtxmpqnm6pycyvz", "PHID-USER-hgn5uw2jafgjgfvxibhh"]}}So, we need to ignore changes under the name 'core:customfield'? @mmodell, is there anything else besides the security thing using that name?
the phab API (manifest.gettasktransactions) exposes only the following data:
{
"taskID": "104164",
"transactionPHID": "PHID-XACT-TASK-2bgwvcst6bllpur",
"transactionType": "core:customfield",
"oldValue": null,
"newValue": "default",
"comments": null,
"authorPHID": "PHID-USER-sai77mtxmpqnm6pycyvz",
"dateCreated": "1436701875"
},so I don't see how to determine which customfield it is...
@Legoktm: The other custom fields are story points and bugzilla id. Since those are numeric, you can assume if newValue and oldValue are either null or a string then it is the security field (I know this is a bad assumption, since it might change in the future, but it would work for now)
Or to be more specific, just ignore cases where it's exactly oldValue: null and newValue: "default" since that should cover the security field setting.
Change 233665 had a related patch set uploaded (by Legoktm):
Use CodeEditor for HTML templates on Meta-Wiki
Many years later Phorge emits additional data for this same transaction against the task:
{ "taskID": "104164", "title": "Krinkle set Security to None.", "transactionID": "1448033", "transactionPHID": "PHID-XACT-TASK-2bgwvcst6bllpur", "transactionType": "core:customfield", "oldValue": null, "newValue": "default", "meta": { "customfield:key": "std:maniphest:security_topic" }, "comments": null, "authorPHID": "PHID-USER-sai77mtxmpqnm6pycyvz", "dateCreated": "1436701875" },
It looks like the meta["customfield:key"]="std:maniphest:security_topic" may be a reasonable discriminator to identify this as a modification of the security field.
bd808 opened https://gitlab.wikimedia.org/toolforge-repos/wikibugs2/-/merge_requests/21
Ignore more phorge transaction types
bd808 merged https://gitlab.wikimedia.org/toolforge-repos/wikibugs2/-/merge_requests/21
Ignore more phorge transaction types
Mentioned in SAL (#wikimedia-cloud) [2024-03-24T21:11:41Z] <wmbot~bd808@tools-bastion-12> Restarted phoge job to pick up fixes for T105625 & T357875