Discussion about this has fragmented across multiple tasks (e.g. T307164, T309411, T309318) — centralising with a decisive requested outcome:
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T285977 IP Info | |||
| Resolved | • Niharika | T292755 Epic: IP Info access | |||
| Resolved | Security | Urbanecm | T309411 sysop access to ipinfo logs can leak IP addresses that sysops should not have access to | ||
| Resolved | Urbanecm | T309928 Remove `ipinfo-view-log` from sysops |
There is also no reason why checkusers can just call the logbook for no reason at all.
Nobody should have this right, because this logbook gives conclusions about viewed pages of the respective users of the toll. At most, entries from individual users that are queried via CU should be visible.
I quite like this idea, but in the spirit of keeping this task solely focused on one thing ("remove the ipinfo-view-log from sysops"), it would be best served to create a separate task for your suggestion 🙂
@Urbanecm Sysops still could view Speical:log/ipinfo at present, seems you forgot a sync per noc conf.
Mea culpa, I synced the incorrect file (I'm used to permissions being set in IS.php, apparently). Fixed. Sorry for that! Should be fine now.