Page MenuHomePhabricator

Tasks created via Conduit API have restricted edit policy (due to general "Default Edit Policy" for Maniphest)
Open, LowPublic

Description

Random example: T305284

The edit policy which is used.

editpolicy.png (221×414 px, 16 KB)

When briefly taking a look at the code I was not capable of spotting where this comes from. Maybe it is a default value from the api which needs to be overriden with 'all users' or something like that.

Event Timeline

Aklapper renamed this task from phabricator maintenance bot creates post-cretion tasks with weird edit policy to phabricator maintenance bot creates post-creation tasks with restricted edit policy.Apr 13 2022, 6:11 AM
taavi renamed this task from phabricator maintenance bot creates post-creation tasks with restricted edit policy to Tasks created via Phabricator APIs have restricted edit policy.Apr 13 2022, 5:20 PM
taavi edited projects, added Phabricator; removed Phabricator maintenance bot.
taavi subscribed.

Not limited to the maintenance bot, the Cloud VPS stretch deprecation tasks created by @StrikerBot have the same issue.

In T305998#7853089, @Majavah wrote:

Found it. The default is coming from https://phabricator.wikimedia.org/applications/view/PhabricatorManiphestApplication/ and can be adjusted there by a Phab admin.

It seems like it was kind of intended?

It can be bypassed anyway, since anyone can just sub themself and then are covered by the edit policy.

Hmm, the setting that Majavah found has not been changed since 2019 (which makes me assume that nearly all Forms have a non-default setting) and its current setting probably had to do with vandalism.

Hmm, the setting that Majavah found has not been changed since 2019 (which makes me assume that nearly all Forms have a non-default setting) and its current setting probably had to do with vandalism.

Form 96 is definitely affected

Edit Policy of Form 96 is set to author, admins, subscribers, and members of { Trusted-Contributors | WMF-NDA }. That makes sense to me.

Edit Policy of Form 96 is set to author, admins, subscribers, and members of { Trusted-Contributors | WMF-NDA }. That makes sense to me.

Which is exactly the same as in this task which seems to be hinting it should be made All users

not sure if requesting deployment training makes sense if you're not trusted but maybe I'm nitpicking here...

not sure if requesting deployment training makes sense if you're not trusted but maybe I'm nitpicking here...

Maybe not but I'm fairly sure it's not deliberate and the cause is the same as this task.

Aklapper renamed this task from Tasks created via Phabricator APIs have restricted edit policy to Tasks created via Conduit API have restricted edit policy (due to general "Default Edit Policy" for Maniphest).Jul 14 2023, 10:47 AM
Aklapper moved this task from To Triage to Policies on the Phabricator board.