Description
Related Objects
Event Timeline
Meh.
sudo /srv/phab/phabricator/bin/policy unlock --edit
throws
EXCEPTION: (Exception) Object edit policy can not be unlocked because this object does not have a mutable edit policy.
sudo /srv/phab/phabricator/bin/policy unlock --owner
(to temporarily become the rule owner, then disable the rule in the UI, then change the rule owner back via CLI) throws
EXCEPTION: (Exception) Object owner can not be unlocked: the unlocking engine ("PhabricatorDefaultUnlockEngine") for this object does not implement an owner unlocking mechanism.
I don't want to delete the rules either via sudo /srv/phab/phabricator/bin/remove destroy because why do that if the user might use them again later?
Is this really not possible?
According to https://discourse.phabricator-community.org/t/herald-policy-setting-to-allow-users-to-view-but-only-admin-to-create-edit/2841/3, Herald rules can be disabled by running something like the following:
sudo /srv/phab/phabricator/bin/herald rule --disable --rule <rule number, eg. H66>
@Sau226: Uh, thanks a lot for finding this!
Added to https://wikitech.wikimedia.org/w/index.php?title=Phabricator&type=revision&diff=1868640&oldid=1860242
(Created https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/602951 to get permissions via CLI)