Page MenuHomePhabricator

Create Special Page for Mass Blocking users
Open, Needs TriagePublic

Description

Forked from T246368: Create maintenance script to block a list of users

While there are gadgets and alike for doing this, MediaWiki should have a way to "mass block" a list of users. This could then be tied into new users log/users lists, allowing checkbox selection and moving to the mass block page to block them all in one go

Advanced features like building lists with regex/wildcards and stuff would be nice, but could come later

https://it.wikipedia.org/wiki/MediaWiki:Gadget-Massblock.js looks like

It should be core functionality, not a gadget that potentially need separate maintenance. I don't know if it necessarily needs to be a separate form (and a separate right?), because a multi select option (or multi line textbox) on Special:Block could suffice too. The changes to the code is then just to iterate over the list of users, rather than just working on one...

Event Timeline

Reedy created this task.Feb 28 2020, 6:46 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFeb 28 2020, 6:46 PM

Not that I'm opposed, but would having this imply a mirrored unblock capability? What about protection and deletion?

Reedy added a comment.Feb 28 2020, 9:39 PM

Not that I'm opposed, but would having this imply a mirrored unblock capability? What about protection and deletion?

Unblock is maybe in scope here. Protection and deletion should be their own separate tasks, if they're actually useful/needed/wanted.

I don't know if mass unblock is necessarily needed. The use case is more for "mass blocking" spam accounts, that are never going to be unblocked etc.

This is what https://www.mediawiki.org/wiki/Extension:BlockBatch does, though it is written by a currently WMF-banned user and currently unmaintained.

T145966#3382152 is a concern.

That's DeleteBatch :)

This is what https://www.mediawiki.org/wiki/Extension:BlockBatch does, though it is written by a currently WMF-banned user and currently unmaintained.

The code looks a lot like SpecialBlock, so it's basically a fork (see P10560, so much code that's roughly the same, just outdated)... And unfortunately doesn't include a version of the form before modifying it, so diffing changes is probably harder

And yeah, it's not been touched in nearly 6 years...

CheckUser allows blocking multiple users at once and we're planning to build a special page forked off of Special:Block to have that functionality in the new Checkuser version.
I am imagining there are some potential risks to granting this functionality to everyone with Special:Block access on the wiki -- are there any past conversations that have happened around this on the wiki?

Reedy added a comment.Mar 27 2020, 9:23 PM

CheckUser allows blocking multiple users at once and we're planning to build a special page forked off of Special:Block to have that functionality in the new Checkuser version.
I am imagining there are some potential risks to granting this functionality to everyone with Special:Block access on the wiki -- are there any past conversations that have happened around this on the wiki?

I'm sure there's some tasks/discussions. Not familiar offhand. Though, I'd think if we trust people to block people, and use gadgets like the above to speed it up...

Could put it behind a "massblock" or similar right though if we wanted to add some extra security

I vaguely recall there being a bit of a concern when enWiki's massblock userscript was first introduced (circa 2010), although I think it was more concerned with someone going rouge than a security risk (different times...). Our ability to handle such things has markedly improved since then (bureaucrat removal of sysop, steward corps, block user who blocked you, etc.) but even ignoring that, that script has been noted in the new admin's guide since at least 2015 so I don't think there's been much a concern there (although it's unclear how many folks, especially old hands, ever read/read it). Absence of evidence != evidence of absence and all that, but just to say that the userscript hasn't been cranked about lately.

Thanks for the context, @Amorymeltzer. If I were to start a new discussion about creating a dedicated special page for mass-block on enwiki, what would be the best place to do it?

I'd go with Wikipedia:Administrators' noticeboard: it's the main place for sysop-related concerns and notices, and is tracked pretty heavily by everyone so it's a common place for such notices. There could be arguments for other places, but AN makes the most sense to introduce and take folks' temperature.

(belated cc of @MusikAnimal as the author of the new admin guide, forgot to do so previously)

Jony added a subscriber: Jony.Mar 29 2020, 6:05 PM
Ahmad252 added a subscriber: Ahmad252.EditedApr 10 2020, 2:53 PM

I think this should be granted to all users with the ability to block users (with extra features for CheckUsers that should be discussed in Special:InvestigateBlock-related tasks). We already have User:Timotheus Canens/massblock.js that does the very same thing. I have not tested the script yet, but the fact that it exists (and has been listed on Wikipedia:Administrators' guide/Tools) suggests that we can trust administrators with a massblock function.