Page MenuHomePhabricator

Keep using the 'editmyoptions' user right for GlobalPreferences
Closed, ResolvedPublic1 Estimated Story Points

Description

There's a TODO in the code at the moment about whether or not the editmyoptions user right (description: "Edit your own preferences") is sufficient for global prefs. I think it is, but I wanted to just see if there was anything that I'm not considering, before removing the todo.

Editing that user right is the recommended way to disable user preferences.

Is there some weird situation in which a site would want to disable local preference editing, but keep global enabled? Surely they'd just share the user_properties table then?

Event Timeline

At that time I was thinking of OAuth/BotPasswords. Both of those have editmyoptions as a separate grant, and I wasn't sure if we also needed to have a separate user right plus separate grant for it. I think the current right is good enough though.

Ok, we'll just remove the comments from the code, and stick with a single user right.

DannyH set the point value for this task to 1.Sep 19 2017, 10:53 PM
DannyH moved this task from New & TBD Tickets to Up Next (June 3-21) on the Community-Tech board.
Niharika renamed this task from Keep using the 'editmyoptions' user right for GlobalPreferences? to Keep using the 'editmyoptions' user right for GlobalPreferences.Sep 19 2017, 11:26 PM

Change 402139 had a related patch set uploaded (by MaxSem; owner: MaxSem):
[mediawiki/extensions/GlobalPreferences@master] Remove TODOs we decided we don't need

https://gerrit.wikimedia.org/r/402139

Change 402139 merged by jenkins-bot:
[mediawiki/extensions/GlobalPreferences@master] Remove TODOs we decided we don't need

https://gerrit.wikimedia.org/r/402139

MaxSem removed a project: Patch-For-Review.
MaxSem moved this task from Needs Review/Feedback to Q1 2018-19 on the Community-Tech-Sprint board.