Maniphest T282913

Implement agreed security and control measures in the Wikifunctions system
Closed, ResolvedPublic
Actions

Assigned To

Jdforrester-WMF

Authored By

	Jdforrester-WMF
	May 15 2021, 12:25 AM

Tags

Referenced Files

None

Subscribers

Jdforrester-WMF

Description

This is a top-level task; will create a bunch of tasks underneath.

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved	PRODUCTION ERROR	Jdforrester-WMF	T344206 Special:MathStatus exception error on Wikifunctions
		Resolved		Jdforrester-WMF	T342865 Post-creation work for wikifunctionswiki
		Resolved		BTullis	T289316 Prepare and check storage layer for Wikifunctions.org (new public content wiki)
		Resolved		Jdforrester-WMF	T275945 Create Wikifunctions.org
		Resolved		Jdforrester-WMF	T299176 Phase Theta – Root task
		Resolved		Jdforrester-WMF	T282913 Implement agreed security and control measures in the Wikifunctions system
		Resolved		Jdforrester-WMF	T278651 Add rate limits and rights for each part of the system
		Resolved		Jdforrester-WMF	T282914 Provide user rights for editing of ZObjects at all, and specific ones for ZImplementations, ZTesters, and ZFunctions
		Resolved		ori	T282921 Implement per-user request rate limits in the orchestrator
		Resolved		None	T261470 Sandboxing and monitoring of evaluations
		Resolved		cmassaro	T282923 Provide a mechanism by which sysadmins can easily disable/re-enable specific language evaluators from Wikifunctions
		Resolved		cmassaro	T323049 Consider Propagating Remaining Time among Orchestrator and Evaluator Processes
		Resolved		cmassaro	T323046 Implement per-request timeout / resource consumption limits in the evaluator
		Resolved		cmassaro	T326785 Kubernetes Wikifunctions security and control measures

Event Timeline

Jdforrester-WMF created this task.May 15 2021, 12:25 AM

Jdforrester-WMF added a subtask: T278651: Add rate limits and rights for each part of the system.

Jdforrester-WMF added a subtask: T261470: Sandboxing and monitoring of evaluations.May 15 2021, 12:45 AM

Jdforrester-WMF added a subtask: T282915: Inform users on function pages (and in indices?) about their usage scale and nature.May 15 2021, 12:50 AM

DVrandecic closed subtask T261470: Sandboxing and monitoring of evaluations as Resolved.May 26 2021, 4:33 PM

DVrandecic moved this task from To Triage to To triage: Un-phased work on the Abstract Wikipedia team board.May 26 2021, 4:45 PM

Jdforrester-WMF moved this task from To triage: Un-phased work to Phase κ – Clean-up on the Abstract Wikipedia team board.Sep 14 2021, 7:49 PM

Jdforrester-WMF edited projects, added Abstract Wikipedia team (Phase κ – Clean-up); removed Abstract Wikipedia team.

Jdforrester-WMF edited projects, added Abstract Wikipedia team (Phase θ – Throttling); removed Abstract Wikipedia team (Phase κ – Clean-up).Mar 8 2022, 10:55 PM

Jdforrester-WMF added a parent task: T299176: Phase Theta – Root task.

Jdforrester-WMF moved this task from Incoming to Ready: G2. Correct & efficient on the Abstract Wikipedia team (Phase θ – Throttling) board.Apr 19 2022, 4:35 PM

Jdforrester-WMF triaged this task as Medium priority.Apr 19 2022, 4:46 PM

ori closed subtask T282921: Implement per-user request rate limits in the orchestrator as Resolved.Aug 4 2022, 3:23 PM

cmassaro added subtasks: T323049: Consider Propagating Remaining Time among Orchestrator and Evaluator Processes, T323046: Implement per-request timeout / resource consumption limits in the evaluator.Nov 14 2022, 4:55 PM

Jdforrester-WMF closed subtask T323046: Implement per-request timeout / resource consumption limits in the evaluator as Resolved.Jan 9 2023, 4:51 PM

Jdforrester-WMF reopened subtask T282923: Provide a mechanism by which sysadmins can easily disable/re-enable specific language evaluators from Wikifunctions as Open.Feb 3 2023, 4:57 PM

Jdforrester-WMF added a project: Epic.Apr 5 2023, 11:15 PM

DVrandecic closed subtask T323049: Consider Propagating Remaining Time among Orchestrator and Evaluator Processes as Resolved.May 16 2023, 12:30 AM

Jdforrester-WMF closed subtask T282923: Provide a mechanism by which sysadmins can easily disable/re-enable specific language evaluators from Wikifunctions as Resolved.Jun 8 2023, 8:31 PM

Jdforrester-WMF closed subtask T278651: Add rate limits and rights for each part of the system as Resolved.Jun 8 2023, 8:37 PM

Jdforrester-WMF mentioned this in T338522: Implement agreed post-launch security and control measures in the Wikifunctions system.Jun 8 2023, 9:28 PM

Jdforrester-WMF removed a subtask: T282917: Cache requested resources locally in the orchestrator with an appropriate TTL.

Jdforrester-WMF removed a subtask: T282918: Limit outbound request limits for sources, both source-wide and for specific results.

Jdforrester-WMF removed a subtask: T282919: Validate acceptable URL patterns prior to any additional execution on the orchestrator.

Jdforrester-WMF removed a subtask: T282915: Inform users on function pages (and in indices?) about their usage scale and nature.

Jdforrester-WMF removed a subtask: T282924: Provide a mechanism by which sysadmins can easily trigger re-evaluation of specific language evaluators, e.g. on security or bugfix upgrades.Jun 8 2023, 9:30 PM

Jdforrester-WMF removed a subtask: T282922: Implement system-wide overall request rate / resource consumption limits in the orchestrator.

Jdforrester-WMF moved this task from Phase θ – Throttling to Phase λ – Launch on the Abstract Wikipedia team board.Jun 16 2023, 8:48 AM

Jdforrester-WMF edited projects, added Abstract Wikipedia team (Phase λ – Launch); removed Abstract Wikipedia team (Phase θ – Throttling).

Jdforrester-WMF moved this task from Incoming to Engineering tasks on the Abstract Wikipedia team (Phase λ – Launch) board.Jun 16 2023, 8:55 AM

cmassaro removed a subtask: T282920: Implement per-request timeout / resource consumption limits in the orchestrator.Jun 26 2023, 3:49 PM

DVrandecic changed the task status from Open to In Progress.Jul 22 2023, 2:10 AM

DVrandecic moved this task from Engineering tasks to In progress on the Abstract Wikipedia team (Phase λ – Launch) board.

akosiaris closed subtask T326785: Kubernetes Wikifunctions security and control measures as Resolved.Jul 25 2023, 12:20 PM

Jdforrester-WMF closed this task as Resolved.Jul 25 2023, 2:15 PM

Jdforrester-WMF claimed this task.

Jdforrester-WMF moved this task from In progress to Complete on the Abstract Wikipedia team (Phase λ – Launch) board.