Accessing private information through SecurePoll should be logged
Open, LowPublic

Description

At this time, when a user accesses the details of a vote (which contains IP and user-agent information) this is not logged. Similar to T152934, we should also modify SecurePoll such that:

  • Users don't see the private info by default; they will only see it if they ask for it
  • A separate right should be created for users who are allowed to see private details
  • Every time private details associated with a vote are viewed, it should be logged
Huji created this task.Dec 12 2016, 4:37 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 12 2016, 4:37 PM
Huji triaged this task as High priority.Dec 12 2016, 9:58 PM
Huji claimed this task.
Huji lowered the priority of this task from High to Low.Jun 10 2017, 1:57 AM