Add owner_account and change admins to admin_accounts in config
Closed, InvalidPublic
Actions

Assigned To

None

Authored By

	MacFan4000
	Jun 10 2020, 9:34 PM

Description

Nick based access lists are generally not very secure, this would allow us to use nickserv account based access lists.

Restricted Application added subscribers: RhinosF1, Zppix, Aklapper. · View Herald Transcript

security task

In T255077#6212993, @MacFan4000 wrote:

security task

Raging troll who loves to impersonate people, this needs to be private to not give them ideas :)

RhinosF1 triaged this task as High priority.Jun 10 2020, 9:59 PM

RhinosF1 changed Author Affiliation from N/A to Other (Please specify in description).

MacFan4000 raised the priority of this task from High to Unbreak Now!.

Still not done, see -logs and fix the fall out.

I'd also like to leave a reminder to write docs on deploying security bugs.

Not UBN anymore

Issue resolved but leaving open for doc writing, can be made public

MacFan4000 changed the subtype of this task from "Security Issue" to "Task".Jun 10 2020, 11:43 PM

In T255077#6213065, @RhinosF1 wrote:

Issue resolved but leaving open for doc writing, can be made public

I'll tag Security-Team for the public part.

sbassett lowered the priority of this task from High to Medium.Jun 17 2020, 3:37 PM

sbassett changed the visibility from "Custom Policy" to "Public (No Login Required)".

What needs to be documented here?

In T255077#6260186, @MacFan4000 wrote:

What needs to be documented here?

Deploying of Security issues

In T255077#6260188, @RhinosF1 wrote:

In T255077#6260186, @MacFan4000 wrote:

What needs to be documented here?

Deploying of Security issues

Just FYI - this is the current documentation for Wikimedia production: https://wikitech.wikimedia.org/wiki/How_to_deploy_code#Security_patches. I'd guess most of that could be borrowed as a template of sorts to create the documentation for ZppixBot.