When a user is part of a group that doesn't have rights to change groups, instead of refusing access to the page, we should give a version that shows details such as the groups they are in and the log of changes.
Description
Details
- Reference
- bz25319
Subject | Repo | Branch | Lines +/- | |
---|---|---|---|---|
Allow all users to view Special:UserRights | mediawiki/core | master | +69 -107 | |
Allow all users to view Special:UserRights | mediawiki/core | master | +58 -119 |
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | Jackmcbarn | T27319 Make Special:UserRights available to everyone | |||
Resolved | Huji | T154575 Split MediaWiki:Userrights to sysops and non-sysops |
Event Timeline
There's an ongoing debate about whether to show disabled forms to users or not. For example, ?action=protect has historically shown a disabled form to users (mostly as the protection information was previously not exposed very well in the user interface), but ?action=delete always raises an error for unprivileged users. Special pages with forms are similar to this.
(In reply to comment #1)
There's an ongoing debate about whether to show disabled forms to users or
not.
For example, ?action=protect has historically shown a disabled form to users
(mostly as the protection information was previously not exposed very well in
the user interface), but ?action=delete always raises an error for
unprivileged
users. Special pages with forms are similar to this.
Link to debate, please?
(In reply to comment #3)
Link to debate, please?
Bug 18677 comment 8 and surrounding comments.
Change 107009 had a related patch set uploaded by Jackmcbarn:
Allow all users to view Special:UserRights
I'm still a little confused about the reason behind this change. You can see what groups a user is in anyway just by going to Special:ListUsers. What purpose does it serve letting users see a disabled user rights form?
I tend to find it a nice and faster ui to access
(Also gives change log in the one screen as well)
Change 107009 had a related patch set uploaded (by Jackmcbarn):
Allow all users to view Special:UserRights
In terms of normal user expectations, if I wanted to see information about a user's user groups, I would visit that user's profile. If we're not matching that expectation in MediaWiki, we're probably failing.
Where is Special:UserRights shown to a normal user in the MediaWiki user interface? Is it sufficiently discoverable? I'm still leaning toward the idea that we need a Special:UserInfo or Special:AccountInfo or similar. While I can sympathize with the idea of exposing disabled forms to users, it kind of indicates poor design, in my opinion. (I felt similarly about ?action=protect.) Perhaps I need to adjust my thinking, but this is how I feel currently.
If anything, Special:CentralAuth is probably a good starting point, to be honest. Special:CentralAuth just needs to be changed so that it hooks into a (to be developed) core feature of MediaWiki like Special:UserInfo or whatever. The CentralAuth extension should just supplement an existing core feature with additional information, but first we need the core feature...
I'm raising the priority a little bit as:
- we've a patch available
- the two recent duplicates show it's a wanted feature
What is the status of the patch? On gerrit it says "cannot merge". I guess it needs to be rebased as it is very old. If so, I am happy to do that and make a new patch.
@Huji: Rebasing (and further code changes, see latest comments) are needed. Contributions welcome. :)
Change 310181 had a related patch set uploaded (by Huji):
Allow all users to view Special:UserRights
@Aklapper rebasing proved to be very difficult, so I basically recreated the version 5 of that patch into a new patch (/r/310181). Let me know if this is acceptable. If so, I will work on the comments from that other patch.
Okay I tried a rebase, I hopefully have done everything correctly (this is the first major rebase I have ever done).
https://gerrit.wikimedia.org/r/#/c/107009/ should be the way to go. I am going to abandon the other change.
Change 310181 abandoned by Huji:
Allow all users to view Special:UserRights
Reason:
Abandoning in favor of a rebase of https://gerrit.wikimedia.org/r/#/c/107009/
probably worth noticing this applies to GlobalGroupMembership in the CentralAuth extension too, right?
Potential followup regression (?) in T152600 - could someone take a look please? Thanks!