Page MenuHomePhabricator

Integrate Special:GlobalRenameRequest into local CheckUser tables
Closed, DuplicatePublic

Description

Problem:
As a user, I can log into any account that I have credentials for and request a rename using Special:GlobalRename request. This request is not currently logged into CheckUser tables (nor are login actions). This means that a user logging in with stolen credentials can request a rename invisible to community processes for dealing with abuse.

Solution:
Send rename requests to local CheckUser tables.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Keegan triaged this task as Medium priority.Aug 29 2017, 8:08 PM

Actually using this solution will to fight abuse will require having GRR ID numbers available to see which wiki the request was filed from, so that the investigation can be carried out by local CheckUsers or Stewards as appropriate.