Not sure what the incident was and have not seen the private task, but I wonder: should we separate "electionadmin" right form a (yet to be created) "scrutineer" right, such that election admin only has access to the ballot create/edit pages and the tally page, and scrutineer has access to individual vote data? Of course some may have both roles assigned to them.

In T290856#7487294, @Huji wrote:

Not sure what the incident was and have not seen the private task, but I wonder: should we separate "electionadmin" right form a (yet to be created) "scrutineer" right, such that election admin only has access to the ballot create/edit pages and the tally page, and scrutineer has access to individual vote data? Of course some may have both roles assigned to them.

The incident is almost resolved now: a patch fixing the underlying issue was deployed. I asked in the private task if it can be made public now. There's some followup, but that followup doesn't have security impact.

Now that T290808 is public I guess this counterpart task can be closed?