Page MenuHomePhabricator

CheckUser API can expose suppressed information for log events
Open, MediumPublicBUG REPORT

Description

Splitting from T318166. Not setting as a security ticket as the cat is out of the bag.

Log actions stored by CheckUser that are in the logging table (and thus can be suppressed) are not hidden as CheckUser does not store the log ID so that it can look up the revision deletion status. This means that checkusers who do not have the oversight permissions can access oversighted logs.

To do this CheckUser needs to store any associated log ID. This will be done in T324907. Once this has been achieved this can be fixed.

Related Objects

StatusSubtypeAssignedTask
OpenNone
OpenBUG REPORTNone
OpenDreamy_Jazz
OpenFeatureDreamy_Jazz
ResolvedLadsgroup
ResolvedMilimetric
OpenNone
ResolvedDreamy_Jazz
ResolvedDreamy_Jazz
Resolved Marostegui
ResolvedPRODUCTION ERRORDreamy_Jazz
Resolved Marostegui
OpenDreamy_Jazz
OpenDreamy_Jazz
OpenBUG REPORTDreamy_Jazz
ResolvedDreamy_Jazz
OpenDreamy_Jazz
OpenNone
OpenDreamy_Jazz
OpenDreamy_Jazz
ResolvedDreamy_Jazz
OpenDreamy_Jazz
OpenNone
ResolvedDreamy_Jazz
OpenDreamy_Jazz
OpenBUG REPORTDreamy_Jazz
OpenDreamy_Jazz
ResolvedDreamy_Jazz
ResolvedDreamy_Jazz
ResolvedDreamy_Jazz
OpenPRODUCTION ERRORpmiazga
OpenNone
OpenDreamy_Jazz