Page MenuHomePhabricator
Create Task
Maniphest T273296

Some administrators can no longer add/remove users from the autochecked/editor user groups
Closed, ResolvedPublicBUG REPORT
Actions

Description

I and two further dewiki admins (LexICon, Hgzh) and a bureaucrat (Itti) can no longer assign users to or remove users from the autochecked/editors ("passiver Sichter"/"Sichter") user groups. Those groups are suddenly listed under "Groups you cannot change" for us. It works fine for at least some other administrators. I first noticed this today. It was working fine a few days ago.

Dewiki discussion

Steps to Reproduce:

Actual Results:

  • The groups are listed under "Groups you cannot change" and grayed out.

Expected Results:

  • The groups should be listed under "Groups you can change" and changable.

Details

SubjectRepoBranchLines +/-
Revert "Remove usages and hard deprecate User::changeable(By)Group"mediawiki/coremaster+5 -23
Revert "Move User::changeable(By)Groups methods to UserGroupManager"mediawiki/coremaster+119 -258
Revert "Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group"""mediawiki/corewmf/1.36.0-wmf.28+5 -23
Revert "Move User::changeable(By)Groups methods to UserGroupManager"mediawiki/corewmf/1.36.0-wmf.28+119 -258
Revert "Move User::changeable(By)Groups methods to UserGroupManager"mediawiki/corewmf/1.36.0-wmf.28+119 -262
Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group""mediawiki/corewmf/1.36.0-wmf.28+0 -0
Revert "Remove usages and hard deprecate User::changeable(By)Group"mediawiki/corewmf/1.36.0-wmf.28+5 -23
Customize query in gerrit

Related Objects
Search...

Event Timeline

Count_Count created this task.Jan 29 2021, 3:42 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 29 2021, 3:42 PM
Reedy renamed this task from Some administrators can no longer add/remove users from the autchecked/editor user groups to Some administrators can no longer add/remove users from the autochecked/editor user groups.Jan 29 2021, 3:43 PM
Reedy added projects: MediaWiki-User-management, WMF-General-or-Unknown.
XanonymusX subscribed.Jan 29 2021, 4:00 PM
Urbanecm subscribed.Jan 29 2021, 4:06 PM
Count_Count added a comment.EditedJan 29 2021, 4:20 PM

Adding editor or autoreview rights using the Action API (action=userrights) does not work either, while adding ip-block-exempt using the API works fine, just like what the UI promises.

Trying to add editor or autoreview rights rights results in the same JSON as when trying to add sysop rights, no special error message:

{
    "userrights": {
        "user": "CountCountSocke",
        "userid": 3343530,
        "added": [],
        "removed": []
    }
}
Count_Count updated the task description. (Show Details)Jan 29 2021, 4:44 PM
JJMC89 added a project: MediaWiki-extensions-FlaggedRevs.Jan 29 2021, 5:09 PM
JJMC89 moved this task from Backlog to User rights on the MediaWiki-User-management board.
Urbanecm added a comment.Jan 29 2021, 5:48 PM

I played with this interesting bug for a while, and I noticed the following:

I tried to give my sock +sysop at test2wiki, and I am unable to change anything but IPBE, despite I should be able to grant Editors and Autochecked users, too. Interface looks like this:

image.png (739×980 px, 86 KB)

However:

>>> \MediaWiki\MediaWikiServices::getInstance()->getUserGroupManager()->getGroupsChangeableBy(User::newFromName('Martin Urbanec (test)'))
=> [
     "add" => [
       "ipblock-exempt",
       "editor",
       "autoreview",
     ],
     "remove" => [
       "ipblock-exempt",
       "editor",
       "autoreview",
     ],
     "add-self" => [],
     "remove-self" => [],
   ]
>>>

I changed the code at mwdebug1003, and added wfDebug( __METHOD__ . ": res: " . print_r( $res, true) ); to SpecialUserrights::changeableGroups. The verbose logs say:

2021-01-29 16:34:57 [YBQ5MOgUPfJ@mF7lXPpFfQAAAAs] mwdebug1003 test2wiki 1.36.0-wmf.28 wfDebug DEBUG: UserrightsPage::changeableGroups: res: Array
(
    [add] => Array
        (
            [0] => ipblock-exempt
        )

    [remove] => Array
        (
            [0] => ipblock-exempt
        )

    [add-self] => Array
        (
        )

    [remove-self] => Array
        (
        )

)

It sounds FlaggedRevs might be having troubles adding its rights to core?

To look for why that happens, I added a couple of other debug lines to SpecialUserrights:

$ugm = \MediaWiki\MediaWikiServices::getInstance()->getUserGroupManager();
wfDebug( __METHOD__ . ": options: addGroups: " . print_r( $ugm->options->get( 'AddGroups' ), true ) ); // I made options public at mwdebug1003
$config = \MediaWiki\MediaWikiServices::getInstance()->getMainConfig();
wfDebug( __METHOD__ . ": config: addGroups: " . print_r( $config->get( 'AddGroups' ), true ) );

This is what got logged:

2021-01-29 17:25:25 [YBRFBLlESy6xbLxR9peOFwAAAEo] mwdebug1003 test2wiki 1.36.0-wmf.28 wfDebug DEBUG: UserrightsPage::changeableGroups: options: addGroups: Array                                                     (                                                                                                                                                                                                                        [sysop] => Array                                                                                                                                                                                                         (                                                                                                                                                                                                                        [0] => ipblock-exempt                                                                                                                                                                                            )                                                                                                                                                                                                                                                                                                                                                                                                                                     [bureaucrat] => Array                                                                                                                                                                                                    (                                                                                                                                                                                                                        [0] => flow-bot                                                                                                                                                                                                      [1] => import                                                                                                                                                                                                        [2] => transwiki
            [3] => accountcreator
            [4] => sysop
            [5] => interface-admin
            [6] => bureaucrat
            [7] => bot
            [8] => confirmed
            [9] => copyviobot
        )

    [qa_automation] => Array
        (
            [0] => qa_automation
        )

)
2021-01-29 17:25:25 [YBRFBLlESy6xbLxR9peOFwAAAEo] mwdebug1003 test2wiki 1.36.0-wmf.28 wfDebug DEBUG: UserrightsPage::changeableGroups: config: addGroups: Array
(
    [sysop] => Array
        (
            [0] => ipblock-exempt
            [1] => editor
            [2] => autoreview
        )

    [bureaucrat] => Array
        (
            [0] => flow-bot
            [1] => import
            [2] => transwiki
            [3] => accountcreator
            [4] => sysop
            [5] => interface-admin
            [6] => bureaucrat
            [7] => bot
            [8] => confirmed
            [9] => copyviobot
            [10] => reviewer
        )

    [qa_automation] => Array
        (
            [0] => qa_automation
        )

)

I then verified in ServiceOptions that it indeed gets malformed GlobalVarConfig. The key question is how... Posting to share investigation made so far. This looks like a very interesting bug :).

Reedy added a project: Regression.Jan 29 2021, 6:04 PM
JJMC89 mentioned this in T273317: some users with access are unable to configure pending changes.Jan 29 2021, 7:17 PM
taavi subscribed.Jan 29 2021, 8:28 PM
gerritbot added a comment.Jan 29 2021, 8:32 PM

Change 660006 had a related patch set uploaded (by Reedy; owner: Reedy):
[mediawiki/core@master] Revert "Remove usages and hard deprecate User::changeable(By)Group"

https://gerrit.wikimedia.org/r/660006

gerritbot added a project: Patch-For-Review.Jan 29 2021, 8:32 PM

Change 660007 had a related patch set uploaded (by Reedy; owner: Reedy):
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Remove usages and hard deprecate User::changeable(By)Group"

https://gerrit.wikimedia.org/r/660007

Reedy added a subtask: T273317: some users with access are unable to configure pending changes.Jan 29 2021, 8:48 PM
dancy added a parent task: T271342: 1.36.0-wmf.28 deployment blockers.Jan 29 2021, 8:49 PM
dancy added a parent task: T271343: 1.36.0-wmf.29 deployment blockers.
RhinosF1 subscribed.Jan 29 2021, 8:59 PM
gerritbot added a comment.Jan 29 2021, 9:39 PM

Change 660007 merged by jenkins-bot:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Remove usages and hard deprecate User::changeable(By)Group"

https://gerrit.wikimedia.org/r/660007

ReleaseTaggerBot added a project: MW-1.36-notes (1.36.0-wmf.28; 2021-01-26).Jan 29 2021, 10:00 PM
taavi triaged this task as Unbreak Now! priority.Jan 29 2021, 10:42 PM
Reedy lowered the priority of this task from Unbreak Now! to High.Jan 29 2021, 10:47 PM
Reedy added a project: Platform Engineering.
dancy mentioned this in T271342: 1.36.0-wmf.28 deployment blockers.Jan 29 2021, 10:50 PM
• Pchelolo edited projects, added Platform Team Workboards (MW Expedition); removed Platform Engineering.Jan 30 2021, 2:24 AM
• Pchelolo subscribed.Jan 30 2021, 2:51 AM

I then verified in ServiceOptions that it indeed gets malformed GlobalVarConfig. The key question is how... Posting to share investigation made so far. This looks like a very interesting bug :).

Hm.. Maybe UserGroupManager somehow gets initialized before extension registration is fully completed - then it would get not the full state of globals, but that would be a pretty brutal bug.. Would be interesting to put log a trace from ServiceWiring 'UserGroupManager' initializer..

Urbanecm raised the priority of this task from High to Unbreak Now!.Jan 30 2021, 2:55 PM

This actively blocks wmf.28 and wmf.29 to roll forward, marking as UBN.

• Pchelolo added subscribers: matmarex, Reedy.Jan 30 2021, 2:55 PM

FlaggedRevs is unusual since it modifies wgAddGroup/wgRemoveGroup and other relevant config via a $wgExtensionFunction. Extension functions run quite late in MW initialization sequence, so my running theory is that a UserGroupManager was already initialized by the time FlaggedRevs extension function runs, thus already has a copy of the config before FlaggedRevs modifies it. I've recently made a few other services depend on UserGroupManager, potentially moving the initialization earlier, plus the change to make User::changeableGroups depend on UserGroupManager has made the problem visible. This doesn't happen in a vanilla MW with only FlaggedRevs installed locally, so some other extension might be interfering. To confirm the theory we need to log from ServiceWiring UserGroupManager initialization callback and from config/flaggedrevs extension function, and see what comes first in production.

The correct fix, imho, would be to stop using extension function to modify globals in FlaggedRevs. the comment in that code is

// Configs that must be set after FlaggedRevsHooks::onExtensionFunctions for some reason???

added by @matmarex in https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/627332 where part of the extension function was moved out. Originally it the config was moved into an extension function by @Reedy in https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/518396 to workaround yet another extension registration issue, when the permissions were not unset properly, cause they were reset back by extension registration. Fun!

• Pchelolo added a comment.Jan 30 2021, 2:57 PM

If we wanna pile a workaround on top of a workaround, we could add a new implementation of ServiceOptions - DynamicServiceOptions, which would consult real globals on every call instead of making a copy. But that's probably a nuclear option of last resort.

Urbanecm added a comment.Jan 30 2021, 3:18 PM
In T273296#6788823, @Pchelolo wrote:

I then verified in ServiceOptions that it indeed gets malformed GlobalVarConfig. The key question is how... Posting to share investigation made so far. This looks like a very interesting bug :).

Hm.. Maybe UserGroupManager somehow gets initialized before extension registration is fully completed - then it would get not the full state of globals, but that would be a pretty brutal bug.. Would be interesting to put log a trace from ServiceWiring 'UserGroupManager' initializer..

This sounds about right. I tried (and failed) to reproduce the bug at localhost. Hence, I moved test2wiki only to wmf.28 at mwdebug1003, and added three lines to ServiceWiring's UserGroupManager initialization:

global $wgAddGroups;
var_dump( $wgAddGroups );
throw new \MWException( 'Test livehacking T273296' );  // To get a stack trace

This is what I got:

array(3) { ["sysop"]=> array(1) { [0]=> string(14) "ipblock-exempt" } ["bureaucrat"]=> array(10) { [0]=> string(8) "flow-bot" [1]=> string(6) "import" [2]=> string(9) "transwiki" [3]=> string(14) "accountcreator" [4]=> string(5) "sysop" [5]=> string(15) "interface-admin" [6]=> string(10) "bureaucrat" [7]=> string(3) "bot" [8]=> string(9) "confirmed" [9]=> string(10) "copyviobot" } ["qa_automation"]=> array(1) { [0]=> string(13) "qa_automation" } } array(3) { ["sysop"]=> array(1) { [0]=> string(14) "ipblock-exempt" } ["bureaucrat"]=> array(10) { [0]=> string(8) "flow-bot" [1]=> string(6) "import" [2]=> string(9) "transwiki" [3]=> string(14) "accountcreator" [4]=> string(5) "sysop" [5]=> string(15) "interface-admin" [6]=> string(10) "bureaucrat" [7]=> string(3) "bot" [8]=> string(9) "confirmed" [9]=> string(10) "copyviobot" } ["qa_automation"]=> array(1) { [0]=> string(13) "qa_automation" } }

[YBV1Gq25u4xs@pD9OYkZ1gAAABI] /wiki/Special:UserRights/Martin_Urbanec_(test) MWException: Test livehacking T273296

Backtrace:

from /srv/mediawiki/php-1.36.0-wmf.28/includes/ServiceWiring.php(1421)
#0 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(447): Wikimedia\Services\ServiceContainer->{closure}(MediaWiki\MediaWikiServices)
#1 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(416): Wikimedia\Services\ServiceContainer->createService(string)
#2 /srv/mediawiki/php-1.36.0-wmf.28/includes/MediaWikiServices.php(255): Wikimedia\Services\ServiceContainer->getService(string)
#3 /srv/mediawiki/php-1.36.0-wmf.28/includes/MediaWikiServices.php(1456): MediaWiki\MediaWikiServices->getService(string)
#4 /srv/mediawiki/php-1.36.0-wmf.28/includes/ServiceWiring.php(1029): MediaWiki\MediaWikiServices->getUserGroupManager()
#5 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(447): Wikimedia\Services\ServiceContainer->{closure}(MediaWiki\MediaWikiServices)
#6 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(416): Wikimedia\Services\ServiceContainer->createService(string)
#7 /srv/mediawiki/php-1.36.0-wmf.28/includes/MediaWikiServices.php(255): Wikimedia\Services\ServiceContainer->getService(string)
#8 /srv/mediawiki/php-1.36.0-wmf.28/includes/MediaWikiServices.php(1183): MediaWiki\MediaWikiServices->getService(string)
#9 /srv/mediawiki/php-1.36.0-wmf.28/includes/ServiceWiring.php(149): MediaWiki\MediaWikiServices->getPermissionManager()
#10 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(447): Wikimedia\Services\ServiceContainer->{closure}(MediaWiki\MediaWikiServices)
#11 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(416): Wikimedia\Services\ServiceContainer->createService(string)
#12 /srv/mediawiki/php-1.36.0-wmf.28/includes/MediaWikiServices.php(255): Wikimedia\Services\ServiceContainer->getService(string)
#13 /srv/mediawiki/php-1.36.0-wmf.28/includes/MediaWikiServices.php(552): MediaWiki\MediaWikiServices->getService(string)
#14 /srv/mediawiki/php-1.36.0-wmf.28/extensions/CentralAuth/includes/ServiceWiring.php(11): MediaWiki\MediaWikiServices->getAuthManager()
#15 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(447): Wikimedia\Services\ServiceContainer->{closure}(MediaWiki\MediaWikiServices)
#16 /srv/mediawiki/php-1.36.0-wmf.28/vendor/wikimedia/services/src/ServiceContainer.php(416): Wikimedia\Services\ServiceContainer->createService(string)
#17 /srv/mediawiki/php-1.36.0-wmf.28/includes/MediaWikiServices.php(255): Wikimedia\Services\ServiceContainer->getService(string)
#18 /srv/mediawiki/php-1.36.0-wmf.28/extensions/CentralAuth/includes/CentralAuthServices.php(20): MediaWiki\MediaWikiServices->getService(string)
#19 /srv/mediawiki/php-1.36.0-wmf.28/extensions/CentralAuth/includes/CentralAuthUtils.php(11): CentralAuthServices::getUtilityService(NULL)
#20 /srv/mediawiki/php-1.36.0-wmf.28/extensions/CentralAuth/includes/CentralAuthUtils.php(121): CentralAuthUtils::getUtilityService()
#21 /srv/mediawiki/php-1.36.0-wmf.28/extensions/CentralAuth/includes/session/CentralAuthSessionProvider.php(129): CentralAuthUtils::getCentralSessionById(string)
#22 /srv/mediawiki/php-1.36.0-wmf.28/includes/session/SessionManager.php(488): CentralAuthSessionProvider->provideSessionInfo(WebRequest)
#23 /srv/mediawiki/php-1.36.0-wmf.28/includes/session/SessionManager.php(214): MediaWiki\Session\SessionManager->getSessionInfoForRequest(WebRequest)
#24 /srv/mediawiki/php-1.36.0-wmf.28/includes/WebRequest.php(827): MediaWiki\Session\SessionManager->getSessionForRequest(WebRequest)
#25 /srv/mediawiki/php-1.36.0-wmf.28/includes/session/SessionManager.php(136): WebRequest->getSession()
#26 /srv/mediawiki/php-1.36.0-wmf.28/includes/Setup.php(720): MediaWiki\Session\SessionManager::getGlobalSession()
#27 /srv/mediawiki/php-1.36.0-wmf.28/includes/WebStart.php(89): require_once(string)
#28 /srv/mediawiki/php-1.36.0-wmf.28/index.php(44): require(string)
#29 /srv/mediawiki/w/index.php(3): require(string)
#30 {main}

The most important part is that $wgAddGroups is indeed copied before FlaggedRevs has a chance to get inicialized. Thanks to the stacktrace, it's easy to answer why:

  1. Setup.php invokes SessionManager before FlaggedRevs's permissions get incialized, which (thanks to being tied up by CentralAuth) consults CentralAuthUtilityService, which gets inicialized
  2. CentralAuthUtilityService requires AuthManager, which requires PermissionManager
  3. PermissionManager requires UserGroupManager, which gets outdated version of $wgAddGroups (and maybe other variables)

This means we have an easy workaround: revert https://gerrit.wikimedia.org/r/c/mediawiki/core/+/654718, and use global $wgAddGroups instead, as before the change. We can think about how to fix this properly after wmf.28 is deployed again.

I don't think the super-delayed configuration of FlaggedRevs in flaggedrevs.php (part of our own configuration) @Pchelolo mentions plays a role. For test2wiki, which is where i successfullly reproduced the issue, AddGroups is not touched at all in flaggedrevs.php, leaving us at the defaults set by FlaggedRevs' extension.json. That probably means our init sequence inicializes SessionManager before it loads extension.json files.

gerritbot added a comment.Jan 30 2021, 3:21 PM

Change 660023 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[mediawiki/core@master] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

https://gerrit.wikimedia.org/r/660023

• Pchelolo added a comment.Jan 30 2021, 3:27 PM

Fun. Thank you @Urbanecm for the stack trace. Agreed, let's revert the whole thing and unblock the train, properly fixing it will be tricky.

• Pchelolo added a comment.Jan 30 2021, 3:31 PM

Heh.. I think I know how to workaround the problem in a nicer way. It doesn't change the decision to revert everything for now, will do it separately. Now, as we're introducing Authority interface it is going to be very easy to break dependency from AuthManager to PermissionManager, thus breaking up the too early initialization sequence.

gerritbot added a comment.Jan 30 2021, 3:36 PM

Change 660023 abandoned by Urbanecm:
[mediawiki/core@master] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

Reason:
a dupe of 660006

https://gerrit.wikimedia.org/r/660023

gerritbot added a comment.Jan 30 2021, 3:37 PM

Change 660023 restored by Ppchelko:
[mediawiki/core@master] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

https://gerrit.wikimedia.org/r/660023

gerritbot added a comment.Jan 30 2021, 3:50 PM

Change 660006 merged by jenkins-bot:
[mediawiki/core@master] Revert "Remove usages and hard deprecate User::changeable(By)Group"

https://gerrit.wikimedia.org/r/660006

ReleaseTaggerBot edited projects, added MW-1.36-notes (1.36.0-wmf.29; 2021-02-02); removed MW-1.36-notes (1.36.0-wmf.28; 2021-01-26).Jan 30 2021, 4:00 PM
gerritbot added a comment.Jan 30 2021, 4:59 PM

Change 660024 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

https://gerrit.wikimedia.org/r/660024

gerritbot added a comment.Jan 30 2021, 4:59 PM

Change 660024 abandoned by Ppchelko:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

Reason:

https://gerrit.wikimedia.org/r/660024

gerritbot added a comment.Jan 30 2021, 5:21 PM

Change 660023 merged by jenkins-bot:
[mediawiki/core@master] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

https://gerrit.wikimedia.org/r/660023

gerritbot added a comment.Jan 31 2021, 11:19 PM

Change 660532 had a related patch set uploaded (by Urbanecm; owner: Urbanecm):
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group""

https://gerrit.wikimedia.org/r/660532

gerritbot added a comment.Jan 31 2021, 11:20 PM

Change 660532 abandoned by Urbanecm:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group""

Reason:

https://gerrit.wikimedia.org/r/660532

gerritbot added a comment.Jan 31 2021, 11:22 PM

Change 660532 restored by Urbanecm:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group""

https://gerrit.wikimedia.org/r/660532

gerritbot added a comment.Jan 31 2021, 11:22 PM

Change 660532 abandoned by Urbanecm:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group""

Reason:

https://gerrit.wikimedia.org/r/660532

gerritbot added a comment.Jan 31 2021, 11:24 PM

Change 660533 had a related patch set uploaded (by Urbanecm; owner: Urbanecm):
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group"""

https://gerrit.wikimedia.org/r/660533

gerritbot added a comment.Jan 31 2021, 11:25 PM

Change 660024 restored by Urbanecm:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

https://gerrit.wikimedia.org/r/660024

gerritbot added a comment.Jan 31 2021, 11:33 PM

Change 660649 had a related patch set uploaded (by Urbanecm; owner: Urbanecm):
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

https://gerrit.wikimedia.org/r/660649

gerritbot added a comment.Jan 31 2021, 11:33 PM

Change 660024 abandoned by Urbanecm:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

Reason:
can't figure out how to un-WIP it, uploading new one

https://gerrit.wikimedia.org/r/660024

Urbanecm added a comment.Jan 31 2021, 11:47 PM

If we want to re-deploy wmf.28 on Monday, we need to merge&deploy the following two patches:

Since both are already in master, this is no longer a blocker for wmf.29 (yet unbranched).

Urbanecm removed a parent task: T271343: 1.36.0-wmf.29 deployment blockers.Jan 31 2021, 11:47 PM
gerritbot added a comment.Feb 1 2021, 10:26 AM

Change 660533 merged by jenkins-bot:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Revert "Revert "Remove usages and hard deprecate User::changeable(By)Group"""

https://gerrit.wikimedia.org/r/660533

gerritbot added a comment.Feb 1 2021, 10:26 AM

Change 660649 merged by jenkins-bot:
[mediawiki/core@wmf/1.36.0-wmf.28] Revert "Move User::changeable(By)Groups methods to UserGroupManager"

https://gerrit.wikimedia.org/r/660649

Stashbot added a comment.Feb 1 2021, 10:39 AM

Mentioned in SAL (#wikimedia-operations) [2021-02-01T10:39:40Z] <urbanecm@deploy1001> Synchronized php-1.36.0-wmf.28/includes/user//User.php: Fixing T273317 T273296 (duration: 00m 58s)

Stashbot added a comment.Feb 1 2021, 10:41 AM

Mentioned in SAL (#wikimedia-operations) [2021-02-01T10:41:04Z] <urbanecm@deploy1001> sync-file aborted: Fixing T273317 T273296 (duration: 00m 12s)

Stashbot added a comment.Feb 1 2021, 10:42 AM

Mentioned in SAL (#wikimedia-operations) [2021-02-01T10:42:14Z] <urbanecm@deploy1001> Synchronized php-1.36.0-wmf.28/includes/: Fixing T273317 T273296 (duration: 01m 01s)

Urbanecm mentioned this in T273435: test2wiki is in group1 rather than group0.Feb 1 2021, 11:08 AM
Urbanecm added a comment.Feb 1 2021, 11:24 AM

So, backports applied, group0 (that does not include test2wiki for some reason) promoted to wmf.28.

ReleaseTaggerBot edited projects, added MW-1.36-notes (1.36.0-wmf.28; 2021-01-26); removed MW-1.36-notes (1.36.0-wmf.29; 2021-02-02).Feb 1 2021, 1:00 PM
Urbanecm lowered the priority of this task from Unbreak Now! to High.Feb 1 2021, 1:32 PM
Urbanecm removed a parent task: T271342: 1.36.0-wmf.28 deployment blockers.
Urbanecm added a comment.Feb 1 2021, 1:35 PM

@Pchelolo Hi, so, the reverts were backported into .28, and so far this issue didn't re-occur. I removed this as a train blocker, and I'll leave it for you to deal with, probably by breaking the too-early inicialization sequence, at which point the reverts can be reverted.

• Pchelolo added a comment.Feb 1 2021, 3:51 PM

Hm, I think the real reason for this bug and it's companion is T270828 - now we have a codepath that ends up initializing PermissionManager/UserGroupManager from SessionManager::getGlobalSessionInfo. It's called during the setup way before extension functions are called, since extension functions have to have fully initialized MW by their contract. So I would assume that PermissionManager probably gets wrong $wgGroupPermissions as well.

• Pchelolo closed this task as Resolved.Feb 1 2021, 6:19 PM
• Pchelolo claimed this task.
• Pchelolo closed subtask T273317: some users with access are unable to configure pending changes as Resolved.

Ive created followup tasks T273510 and T273511 that would allow us to fix the issue properly and unrevert it.

• Pchelolo mentioned this in T275017: Reviewers can't stabilize pages on fiwiki.Feb 18 2021, 3:28 PM
Urbanecm reopened subtask T273317: some users with access are unable to configure pending changes as Open.Feb 20 2021, 9:21 PM
Urbanecm added a parent task: T275334: Changing user groups from $wgExtensionFunctions no longer works reliably.Feb 22 2021, 12:21 AM
• Pchelolo closed subtask T273317: some users with access are unable to configure pending changes as Resolved.May 25 2021, 1:47 PM
taavi mentioned this in T288084: Split CentralAuthUtilityService into multiple smaller services.Aug 4 2021, 12:20 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL