Page MenuHomePhabricator

Community configuration: Create an offswitch that would disable the feature
Closed, ResolvedPublic

Description

Background

As part of T274520: Move Growth configuration to on-wiki JSON file, the Growth team is creating a system to empower communities to edit configuration of the Growth team features.

As with any other feature, this system can have security vulnerabilities. To be able to quickly reduce the damage caused by such vulnerability, we should have an off switch to disable Special:EditGrowthConfig altogether.

Task objective

Implement a config variable that would shut down the special page, and make the system use configuration from global variables, as before the change.

Event Timeline

kostajh renamed this task from Community configuration: Create a killswitch that would disable the feature to Community configuration: Create an offswitch that would disable the feature.Apr 19 2021, 8:13 PM
kostajh updated the task description. (Show Details)
kostajh subscribed.

(I've renamed this feature per guidance in https://inclusivenaming.org/language/evaluation-framework/)

Change 681346 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/GrowthExperiments@master] Make it possible to disable on-wiki configuration

https://gerrit.wikimedia.org/r/681346

Change 681346 merged by jenkins-bot:

[mediawiki/extensions/GrowthExperiments@master] Make it possible to disable on-wiki configuration

https://gerrit.wikimedia.org/r/681346

Change 682538 had a related patch set uploaded (by Urbanecm; author: Urbanecm):

[mediawiki/extensions/GrowthExperiments@master] Disable Special:EditGrowthConfig when on-wiki config is disabled

https://gerrit.wikimedia.org/r/682538

Change 682538 merged by jenkins-bot:

[mediawiki/extensions/GrowthExperiments@master] Disable Special:EditGrowthConfig when on-wiki config is disabled

https://gerrit.wikimedia.org/r/682538

Change #1031093 had a related patch set uploaded (by Eileen; author: Eileen):

[wikimedia/fundraising/crm@master] Switch to a slightly less magic way of denoting how address should be updated

https://gerrit.wikimedia.org/r/1031093

Change #1031108 had a related patch set uploaded (by Eileen; author: Eileen):

[wikimedia/fundraising/crm@master] Move the main message import to the DonationQueue handler

https://gerrit.wikimedia.org/r/1031108

Change #1031107 had a related patch set uploaded (by Eileen; author: Eileen):

[wikimedia/fundraising/crm@master] Finally push the recurring donation to the donation queue

https://gerrit.wikimedia.org/r/1031107