Page MenuHomePhabricator

Owner-only consumers should not appear in lists
Open, MediumPublic

Description

As we are going to get more and more of these, them swamping the list of approved consumers will be annoying. There is little reason anyone would be curious about them. Maybe they should not be visible at all, but at the minimum should be filtered out by default from Special:OAuthListConsumers and Special:OAuthManageConsumers/approved (but not Special:OAuthConsumerRegistration/list). Probably Special:Log/mwoauthconsumer as well.

See also T142275: Owner-only consumers should not expose the user's email address.

Event Timeline

Change 316302 had a related patch set uploaded (by Gergő Tisza):
[WIP] Add development stage, refactor approval workflow

https://gerrit.wikimedia.org/r/316302

Tgr triaged this task as Medium priority.Mar 7 2017, 3:35 AM