Page MenuHomePhabricator

The "register for an event" endpoint does not require the user to accept the policies
Open, Needs TriagePublic

Description

But the UI does:

Screenshot 2022-03-25 at 17.41.58.png (1×2 px, 522 KB)

And if this is a legal requirement, the API should as well.

Event Timeline

Or maybe we should write in the documentation that if you use this endpoint you are implicitly agreeing to all those things...

Or maybe we should write in the documentation that if you use this endpoint you are implicitly agreeing to all those things...

This is what I'd do, i.e., add a notice at mw:Extension:CampaignEvents/Api. Unsure if we can have an official response from Legal though. CC @ifried what do you think?

@Daimona Yes, I think it makes sense for add a notice to mw:Extension:CampaignEvents/Api, so that people will still acknowledge the terms of use and privacy policy if they do not register via the UI. When you wrote, "Unsure if we can have an official response from Legal though," what are you referring to? Apologies, I'm a bit confused. Thanks.

When you wrote, "Unsure if we can have an official response from Legal though," what are you referring to? Apologies, I'm a bit confused. Thanks.

I'm saying that adding a note to the documentation makes sense to me, but I'm unsure if it's ok for Legal, and whether it's possible to run this by them so they can confirm whether it's sufficient.

@Daimona Thanks for clarifying! I can run it by Legal, but I would need to provide them a detailed explanation of when/how people would encounter this message in the documentation. Can you share some details with me? Once I have the info, I can ping Legal.

@Daimona Thanks for clarifying! I can run it by Legal, but I would need to provide them a detailed explanation of when/how people would encounter this message in the documentation. Can you share some details with me? Once I have the info, I can ping Legal.

I've added the note to the documentation, so this is precisely what developers would see.