Page MenuHomePhabricator

Document MediaWiki elevated security feature
Open, Needs TriagePublic

Description

If we plan to rely on elevated security more, it needs to be documented better. The hook and configuration variables have reasonably informative documentation pages ($wgReauthenticateTime, $wgAllowSecuritySensitiveOperationIfCannotReauthenticate, SecuritySensitiveOperationStatus) which is good for wiki admins but not for users or developers needing a quick overview of the concept. There should be a help page and a manual page.

Event Timeline

Tgr created this task.Jun 13 2018, 3:37 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 13 2018, 3:37 PM
Vvjjkkii renamed this task from Document MediaWiki elevated security feature to h3aaaaaaaa.Jul 1 2018, 1:04 AM
Vvjjkkii triaged this task as High priority.
Vvjjkkii updated the task description. (Show Details)
Vvjjkkii removed a subscriber: Aklapper.
Ankry renamed this task from h3aaaaaaaa to Document MediaWiki elevated security feature.Jul 1 2018, 4:32 PM
Ankry raised the priority of this task from High to Needs Triage.
Ankry updated the task description. (Show Details)
Ankry added a subscriber: Aklapper.