Page MenuHomePhabricator

Investigate why ClosedWikiProvider doesn't work
Closed, ResolvedPublic

Description

In T222117, we added ClosedWikiProvider, which allows stewards/sysadmins/etc to create accounts for themselves at closed wikis and disallows the rest autocreations. However, various users, including myself using my staff account, were able to autocreate accounts for them.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change 615713 had a related patch set uploaded (by Urbanecm; owner: Urbanecm):
[operations/mediawiki-config@master] Log ClosedWikiProvider's start with info level

https://gerrit.wikimedia.org/r/615713

Change 615713 merged by jenkins-bot:
[operations/mediawiki-config@master] Log ClosedWikiProvider's start with info level

https://gerrit.wikimedia.org/r/615713

Mentioned in SAL (#wikimedia-operations) [2020-07-23T11:49:56Z] <urbanecm@deploy1001> Synchronized wmf-config/CommonSettings.php: 745ff20f53e4914cf6e1717c963419e74b68e693: Log ClosedWikiProviders start with info level (T258695) (duration: 01m 05s)

Change 615723 had a related patch set uploaded (by Urbanecm; owner: Urbanecm):
[operations/mediawiki-config@master] ClosedWikiProvider: Use testUserForCreation rather than testForAuthentication

https://gerrit.wikimedia.org/r/615723

Urbanecm moved this task from Backlog to Waiting on review on the User-Urbanecm board.
Urbanecm moved this task from Backlog to To deploy on the Wikimedia-Site-requests board.
Urbanecm updated the task description. (Show Details)

Change 615723 merged by jenkins-bot:
[operations/mediawiki-config@master] ClosedWikiProvider: Use testUserForCreation rather than testForAuthentication

https://gerrit.wikimedia.org/r/615723

Mentioned in SAL (#wikimedia-operations) [2020-08-19T18:45:21Z] <urbanecm@deploy1001> Synchronized wmf-config/CommonSettings.php: 83b34e1bd1ed804a70f67e089580e082f89e2a0f: ClosedWikiProvider: Use testUserForCreation rather than testForAuthentication (T258695) (duration: 01m 04s)

This should be fixed now, tested with my WMF account, which has no special global privileges.