I see that suppressredirect is also missing. That might have been added to the bot user group with T133981. Presumably they are not showing up in AbuseFilter for other user groups with these rights as well.

I suspect the list is hardcoded somewhere and just needs updating, but I couldn't find anything in the AbuseFilter codebase.

The log is private. Can you add a screenshot?

@MusikAnimal

How do bots authenticate? Do they use Session or is Basic Auth or OAuth (or any of the above)?

In T163466#3495322, @Huji wrote:

The log is private. Can you add a screenshot?

I am not sure I can share a screenshot with you without violating this user's privacy. I defer to @TBolliger

In T163466#3502362, @dbarratt wrote:

@MusikAnimal

How do bots authenticate? Do they use Session or is Basic Auth or OAuth (or any of the above)?

OAuth or BotPasswords, the former being the preferred route.

In T163466#3502386, @dbarratt wrote:

In T163466#3495322, @Huji wrote:

The log is private. Can you add a screenshot?

I am not sure I can share a screenshot with you without violating this user's privacy. I defer to @TBolliger

It's more the details of the filter itself that are sensitive, but here it's a false-positive of an edit that was successfully saved, so we've nothing to hide :) Basically have a look at HostBot's filter log. They keep getting tripped because extendedconfirmed isn't being returned when checking user_rights.

This also should be in user_groups, by the way. Special:ListGroupRights shows all the user groups and their permissions, if that is of any help.

@MusikAnimal

Is there a list of the extensions that are running on Wikipedia somewhere?

In T163466#3502582, @dbarratt wrote:

@MusikAnimal

Is there a list of the extensions that are running on Wikipedia somewhere?

Special:Version :)

In T163466#3502500, @MusikAnimal wrote:

It's more the details of the filter itself that are sensitive, but here it's a false-positive of an edit that was successfully saved, so we've nothing to hide :) Basically have a look at HostBot's filter log. They keep getting tripped because extendedconfirmed isn't being returned when checking user_rights.

This also should be in user_groups, by the way. Special:ListGroupRights shows all the user groups and their permissions, if that is of any help.

But when I look at https://en.wikipedia.org/wiki/Special:AbuseFilter/examine/969832337 I see that extendedconfirmed actually *is* in the user_groups. Are we sure that is the problem?

In T163466#3502587, @Huji wrote:

But when I look at https://en.wikipedia.org/wiki/Special:AbuseFilter/examine/969832337 I see that extendedconfirmed actually *is* in the user_groups. Are we sure that is the problem?

I guess not! Here's a screenshot of the above examined edit:

The user_rights values actually scrolls but I can promise you extendedconfirmed is not in there :)

@MusikAnimal

So do we need to investigate why this wasn't working? Or can we close this issue since it works now?

Of course!