Page MenuHomePhabricator

Accessing private information through SecurePoll should be logged
Open, Needs TriagePublic

Description

At this time, when a user accesses the details of a vote (which contains IP and user-agent information) this is not logged. Similar to T152934, we should also modify SecurePoll such that:

  • Users don't see the private info by default; they will only see it if they ask for it
  • A separate right should be created for users who are allowed to see private details
  • Every time private details associated with a vote are viewed, it should be logged

Event Timeline

Huji triaged this task as High priority.
Huji lowered the priority of this task from High to Low.Jun 10 2017, 1:57 AM
Huji removed Huji as the assignee of this task.May 20 2020, 7:52 PM
Huji raised the priority of this task from Low to Needs Triage.