Page MenuHomePhabricator

Log when spoofcheck or blacklist is overridden when creating accounts
Open, LowPublic

Description

For the purpose of full transparency and being able to check for local policy compliance, would it be possible to include in the user creation log when an account is created and the creator overrides the blacklist and/or spoofing checks?

Event Timeline

Kharkiv07 raised the priority of this task from to Needs Triage.
Kharkiv07 updated the task description. (Show Details)
Kharkiv07 added a subscriber: Kharkiv07.

Yes...the account creation log could probably be tagged...could you expand a bit more on your usecase?

Both of my examples come from enwp;

  1. Account creators are expected to follow certain criteria when overriding either, and more importantly,
  2. Part of the criteria for granting temporary account creation to those who host events is that they don't use those features

This would allow for a mechanism to make sure that both of these requirements are meet. Moreover, I don't think it hurts to log anything... it allows people to spot abuse and other (miscellaneous) breaches of various policy for a privileged tool on all WMF projects.