Page MenuHomePhabricator

AntiSpoof should run checks at the global level
Closed, ResolvedPublic

Description

Author: mike.lifeguard+bugs

Description:
AntiSpoof would block the vandal "User:Something." from being created if "User:Something" already exists for example. But this only works on one wiki. Please make AntiSpoof run it's checks at both the local and global level to stop confusable global usernames. Kylu says this necessitates a whole new extension: "<kylu> you'd need a whole new extension to implement antispoof in ca"

One issue (there are possibly more):

  • Unifying manually where a conflict occurs. Most probably this should be permitted, since users merging accounts manually are probably OK.

Version: unspecified
Severity: normal

Details

Reference
bz15841

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:22 PM
bzimport added a project: AntiSpoof.
bzimport set Reference to bz15841.
bzimport added a subscriber: Unknown Object (MLST).

lilewyn wrote:

I think this would make AntiSpoof require CentralAuth to be installed, if you simply modified AntiSpoof. You could test for CentralAuth, but it might be better to simply fork AntiSpoof instead into a CA-specific modification: This way, you have one codebase to test and not worry about if a fix to one side breaks something on the other. Bugfixes can be ported.

fran wrote:

A fork of AntiSpoof shouldn't be necessary - AntiSpoof could simply check for the presence of CentralAuth, and additionally run its checks against the global account list. A single codebase is a good thing :)

soxred93 wrote:

*** This bug has been marked as a duplicate of bug 15545 ***