Currently he.wiki's interface-editor group has the following userrights:
*abusefilter-hidden-log
*abusefilter-hide-log
which are oversight-level rights. As soon as a request to suppress some abuselog's entry will come, this config will break privacy policy by giving access to suppressed data to non-identified users.
Description
Description
Details
Details
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Revoke suppression-level rights from interface editors on hewiki | operations/mediawiki-config | master | +1 -2 |
Related Objects
Related Objects
Event Timeline
Comment Actions
I checked back through the history of that permission earlier, unfortunately it seems to predate the migration of mediawiki-config to the public git repository, and the history of the old private SVN repository was lost.
Comment Actions
The matter was originally discussed on T34048 it seems. The original requested is already cc'ed on this bug.
Comment Actions
I left this note on a gerrit change earlier but, yes, this is a suppression level right and it should be removed. I see how it happened (just adding all of the abusefilter rights and it's not well documented) but that's how it's been used (essentially deleting logs which contain private data and being able to view those deleted logs).
Comment Actions
Change 235960 had a related patch set uploaded (by Alex Monk):
Revoke suppression-level rights from interface editors on hewiki
Comment Actions
Change 235960 merged by jenkins-bot:
Revoke suppression-level rights from interface editors on hewiki