Page MenuHomePhabricator

Allowing disabling captchas for certain groups and actions
Closed, ResolvedPublicFeature

Description

Author: chrisgrantmail

Description:
Can the captcha for admins when creating accounts please be turned off. It would making managing the account request backlog easier.

  • Chris

Version: unspecified
Severity: enhancement
URL: http://en.wikipedia.org/w/index.php?title=Special:UserLogin&type=signup

Details

Reference
bz13484

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 10:03 PM
bzimport set Reference to bz13484.
bzimport added a subscriber: Unknown Object (MLST).

ayg wrote:

Is this a configuration issue or a software issue? The default configuration has $wgGroupPermissions['sysop']['skipcaptcha'] = true;. Is this not working correctly, or was it deliberately overridden on Wikimedia for some reason? If it's still set to that default on MediaWiki, this should be refiled as a MediaWiki extensions bug.

chrisgrantmail wrote:

This is a configuration issue. As I understand it the default configuration was deliberately overridden when several admin accounts where hacked, and one admin was found to have gone rouge. However admins shouldn't have to do captchas for account creation because an admin mass creating accounts used for vandalism will be found out pretty quickly, plus autoblocks should stop the other accounts editing.

ayg wrote:

It's not possible to skip captchas for certain groups and certain actions, it seems, only for certain groups for *all* actions (or certain actions for all groups). In particular, sysops would be exempt from captchas for failed logins, which is bad!

This needs to be fixed in the software first, I guess, so I'll refile as that. Once this is fixed a shell bug can be filed.

(In reply to comment #3)

It's not possible to skip captchas for certain groups and certain actions, it
seems, only for certain groups for *all* actions (or certain actions for all
groups).

skipcaptcha right skips the confirm for all skippable captched actions, but
for badlogin it's always shown.

Pppery subscribed.

Not sure what this task has to do with #MediaWiki-extensions-CountEdits

Aklapper changed the subtype of this task from "Task" to "Feature Request".Feb 4 2022, 11:01 AM
Aklapper removed a subscriber: wikibugs-l-list.
TheDJ assigned this task to brion.
TheDJ subscribed.

It seems to me this was fixed in 2014 via T48072

	/**
	 * Logic to check if we need to pass a captcha for the current user
	 * to create a new account, or not
	 *
	 * @param User $creatingUser
	 * @return bool true to show captcha, false to skip captcha
	 */
	public function needCreateAccountCaptcha( User $creatingUser ) {