Totally exclude 'abusefilterprivatedetails' from 'logging' in public replicas
Closed, InvalidPublic

Description

The log (Special:Log/abusefilterprivatedetails) will contain data analogous to the Special:CheckUserLog or Special:Log/suppress. Looking at maintain-views.yaml it's not clear to me if it is totally excluded or not. If it has been not, please do so. Thanks.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFeb 15 2018, 3:29 PM
bd808 closed this task as Invalid.Feb 15 2018, 4:03 PM
bd808 added a subscriber: bd808.

Based on AbuseFilter's extension.json, abusefilterprivatedetails is a distinct log type. The views related to the logging table in the Wiki Replicas are built using an explicit list of allowed log types. This list does not contain abusefilterprivatedetails therefore any rows marked as abusefilterprivatedetails will not be queryable from the Wiki Replicas.

Change 410992 had a related patch set uploaded (by MarcoAurelio; owner: MarcoAurelio):
[operations/puppet@production] maintain-views: Explicitly exclude 'abusefilterprivatedetails'

https://gerrit.wikimedia.org/r/410992

Sorry to edit-conflict. Added a patch to mark the table explicitly excluded in the script as it's done with other sensitive logs.

Also, this won't be avalaible via data dumps, etc? Sorry to be paranoid, but better to be safe.

Change 410992 merged by Andrew Bogott:
[operations/puppet@production] maintain-views: Explicitly exclude 'abusefilterprivatedetails'

https://gerrit.wikimedia.org/r/410992

Also, this won't be avalaible via data dumps, etc? Sorry to be paranoid, but better to be safe.

See prior task:

We grab entries from the logging table by requesting them as an anonymous user and asking MediaWiki to export them. Anything we aren't permitted to see, won't show up.