Page MenuHomePhabricator

No way to work around account creation blocks for global accounts
Closed, ResolvedPublic

Description

A fix for T13148: Users can login with global account and create an account in a wiki even if IP is blocked from account creations resulted in good faith users from other wikis being unable to edit on a wiki where they don't have a local account and account creation is blocked for their underlying IPs. Administrators can manually create accounts for users who aren't registered at all, however there's no equivalent mechanism for global accounts. The only solution is to get an admin to run createLocalAccount.php which obviously would happen only in exceptional situations and does not scale.

Event Timeline

In past months I have encountered many cases where users have account on other wikis but system is not allowing auto creation on specific wiki due to local block.

One recent example is this. While they have requested to create another account at ACC, but it looks like there's no way, unless someone login for them and do it.

I am wondering if there should be possibility that certain user (like sysop/account creators) can allow the automatic account creation in such cases after discussing with checkusers.

OTRS Ticket#2019052410005638 is an example of the problem.

OTRS Ticket#2019081310000247 is another example. I think a reasonable solution is to create a globalgrouppermission to Global IP block exempt that would allow a user to create an account even if their IP is locally blocked.

T259721 has been proposed as a way to get around this problem

Let's do it, I hit it over and over... Simple solution: make maintenance/createLocalAccount.php (which allows sysadmins to workaround this issue) a special page, usable by stewards at very least, possibly also local sysops at their local wiki.

Change 618734 had a related patch set uploaded (by Urbanecm; owner: Majavah):
[mediawiki/extensions/CentralAuth@master] Create special page to allow manually creating local accounts for global users

https://gerrit.wikimedia.org/r/618734

Change 618734 merged by jenkins-bot:
[mediawiki/extensions/CentralAuth@master] Create special page to allow manually creating local accounts for global users

https://gerrit.wikimedia.org/r/618734

Calling this resolved. Thanks, Majavah!