Page MenuHomePhabricator
Create Task
Maniphest T331637

Update features in MediaWiki core for IP Masking
Open, Needs TriagePublic
Actions

Description

This task tracks the various systems and features in MediaWiki core that need to be updated in order to enable temporary accounts for IP Masking.

Read more about IP Masking in this task's parent task: T326816: [Epic] Update features for temporary accounts

Read more about how IP Masking is expected to affect core in T326759#8653302. (Note that this is probably not exhaustive.)

Related Objects
Search...

StatusSubtypeAssignedTask
Restricted Task
 ResolvedkostajhT294511 2021 Security Team wikireplicas audit
 DeclinedNoneT284948 Raw IPs of logged-out users disclosed in wiki-replicas
 ResolvedNiharikaT324492 Temporary accounts - MVP
 OpenNoneT326816 [Epic] Update features for temporary accounts
 OpenNoneT331637 Update features in MediaWiki core for IP Masking
 ResolvedTchandersT331576 Rate limits for Temporary account should match those for anon users
 ResolvedTchandersT331578 File upload defaults for Temporary account should match those for anon users
 ResolvedTchandersT331579 Email defaults for Temporary account should match those for anon users
 ResolvedTchandersT330815 Disallow preference setting by temporary users
 ResolvedCyndymediawiksimT332414 Make ApiOptions unavailable to temporary users
 Resolved• AGueyteT332415 Update UserOptions classes to prevent temporary users having access to preferences
 ResolvedTchandersT330816 [Epic] Temporary users should not be assigned to user groups
 ResolvedTchandersT340457 In UserGroupManager::getUserImplicitGroups, add temporary users to a 'temp' group instead of the 'user' group
 Resolved• AGueyteT340458 Throw an error from API Userrights explaining that temporary users do not have groups
 ResolvedTchandersT340462 Special:UserRights should not list autopromote groups for temporary users
 ResolvedTchandersT340464 Prevent temporary users from being added to autopromote-once groups
 Resolved• AGueyteT340468 Throw an error from UserGroupManager::addUserToGroup if called on a temporary user
 Resolved• TThoabalaT340470 Investigate: UserGroupManager::addUserToGroup should not called on temporary users from WMF deployed extensions
 Resolved• AGueyteT340578 Ensure UserGroupManager::addUserToGroup is not called on temporary users from AbuseFilter extension
ResolvedNoneT340579 Ensure UserGroupManager::addUserToGroup is not called on temporary users from Flow extension
Resolved• TThoabalaT340580 Ensure UserGroupManager::addUserToGroup is not called on temporary users from Echo extension
Resolved• TThoabalaT340583 Ensure UserGroupManager::addUserToGroup is not called on temporary users from LdapAuthentication extension
Resolvedabi_T340584 Ensure UserGroupManager::addUserToGroup is not called on temporary users from Translate extension
Resolved• TThoabalaT340587 Ensure UserGroupManager::addUserToGroup is not called on temporary users from MassMessage extension
Resolved• TThoabalaT340588 Ensure UserGroupManager::addUserToGroup is not called on temporary users from Wikibase extension
Invalid• TThoabalaT340616 Ensure User::addGroup is not called on temporary users from WikiLambda extension
 ResolvedNoneT340618 Ensure User::addGroup is not called on temporary users from CentralAuth extension
 ResolvedTchandersT341600 OutputPage::showPermissionsErrorPage should prompt temporary users to log in for certain actions
 ResolvedFeatureEtonkovidovaT331058 Make Special:Mute only usable for named users
 ResolvedTchandersT332411 Make some authentication APIs unavailable to temporary users
 ResolvedTchandersT336187 [S] Investigate: Creating temp user on non-EditPage actions
 Resolved• Dreamy_JazzT349219 [M] Investigate: Which workflows create an IP actor?
 ResolvedTchandersT349891 [S] Add some kind of logging when an actor is created with an IP address
 ResolvedTchandersT350155 [M] Investigate: Do we need to allow IP actor creation for imports?
 ResolvedkostajhT352914 Investigate: Which extensions save IP addresses
 OpenNoneT336195 Don't set an anonymous user's name to their IP address if IP Masking is enabled
 ResolvedTchandersT337042 Temporary account users should have the same ParserOptions as anonymous users
 ResolvedTchandersT337103 Decide a standard approach for classifying temporary, IP and registered users
 ResolvedTchandersT338836 How should blocks treat temporary users?
 ResolvedBUG REPORT• Dreamy_JazzT339947 IP Masking- Special:Block w/ Different Browsers; Partial Site
 ResolvedTchandersT343704 Ensure temporary users are blocked by configured IP blocks
 DeclinedTchandersT343705 Ensure temporary accounts cannot be suppressed via "hideuser"
 ResolvedTchandersT343714 Soft blocks against an IP address should block temporary accounts using that IP address
 ResolvedNiharikaT339874 Show more helpful messages when temporary users can't access features
 Resolved• Dreamy_JazzT341228 Update action API to handle temporary users
 ResolvedSTranT350701 [S] Add a temp user type to UserDef::PARAM_ALLOWED_USER_TYPES
 DeclinedNoneT351632 Separate out temporary users from 'assert' param in ApiMain
 ResolvedSTranT351636 Add `temp` flag to various APIs
 Resolved• Dreamy_JazzT358249 Update ApiFeedRecentChanges for temporary accounts
 Resolved• Dreamy_JazzT358683 Update ApiQueryUserInfo to handle temporary users
 ResolvedTchandersT358693 Update ApiQueryWatchlist to handle temporary users
 ResolvedTchandersT345578 Ensure that an IP address cannot be saved permanently if IP Masking is enabled
 ResolvedTchandersT354207 Allow IP actors to be created for imports when temporary accounts are enabled
 Resolved• Dreamy_JazzT362019 CannotCreateActorException when undeleting a page with IP contributors, with temporary accounts enabled
 Resolved• Dreamy_JazzT373914 Update reassignEdits.php to prevent reassignment of edits to IP addresses when temporary accounts are enabled
 ResolvedPRODUCTION ERROR• mszaboT373318 CannotCreateActorException: Cannot create an actor for an IP user when temporary accounts are enabled
 OpenNoneT339291 Should temp users be counted as registered & active users on Special:Statistics?

Event Timeline

Tchanders created this task.Mar 9 2023, 3:33 PM
Tchanders added subtasks: T331576: Rate limits for Temporary account should match those for anon users, T331578: File upload defaults for Temporary account should match those for anon users, T331579: Email defaults for Temporary account should match those for anon users, T330815: Disallow preference setting by temporary users.
Tchanders updated the task description. (Show Details)Mar 9 2023, 3:37 PM
Tchanders added a subtask: T330816: [Epic] Temporary users should not be assigned to user groups.Mar 14 2023, 5:30 PM
Tchanders mentioned this in T326759: Investigate: Which WMF deployed code might be affected by IP Masking?.
Tchanders added a subtask: T331058: Make Special:Mute only usable for named users.Mar 16 2023, 2:28 AM
MusikAnimal unsubscribed.Mar 17 2023, 11:15 PM
Tchanders added a subtask: T339874: Show more helpful messages when temporary users can't access features.Jun 19 2023, 5:31 PM
Tchanders closed subtask T331578: File upload defaults for Temporary account should match those for anon users as Resolved.Aug 14 2023, 10:13 AM
Tchanders closed subtask T331579: Email defaults for Temporary account should match those for anon users as Resolved.Aug 14 2023, 10:32 AM
Tchanders closed subtask T332411: Make some authentication APIs unavailable to temporary users as Resolved.
Tchanders closed subtask T337103: Decide a standard approach for classifying temporary, IP and registered users as Resolved.Sep 22 2023, 10:59 AM
kostajh subscribed.Sep 26 2023, 1:35 PM
Etonkovidova closed subtask T331058: Make Special:Mute only usable for named users as Resolved.Oct 12 2023, 10:59 PM
• drochford unsubscribed.Oct 12 2023, 11:17 PM
Tchanders closed subtask T336187: [S] Investigate: Creating temp user on non-EditPage actions as Resolved.Nov 17 2023, 6:55 PM
Tchanders added a subtask: T345578: Ensure that an IP address cannot be saved permanently if IP Masking is enabled.Jan 2 2024, 5:34 PM
Tchanders closed subtask T331576: Rate limits for Temporary account should match those for anon users as Resolved.Jan 11 2024, 7:20 AM
• Dreamy_Jazz closed subtask T345578: Ensure that an IP address cannot be saved permanently if IP Masking is enabled as Resolved.Jan 29 2024, 6:16 PM
Tchanders closed subtask T330815: Disallow preference setting by temporary users as Resolved.Feb 6 2024, 1:49 PM
Tchanders closed subtask T330816: [Epic] Temporary users should not be assigned to user groups as Resolved.Feb 7 2024, 9:50 AM
• Dreamy_Jazz closed subtask T341228: Update action API to handle temporary users as Resolved.Mar 11 2024, 3:16 PM
• Dreamy_Jazz closed subtask T354207: Allow IP actors to be created for imports when temporary accounts are enabled as Resolved.
Tchanders closed subtask T337042: Temporary account users should have the same ParserOptions as anonymous users as Resolved.Apr 2 2024, 5:46 PM
Tchanders added a subtask: T362019: CannotCreateActorException when undeleting a page with IP contributors, with temporary accounts enabled.Apr 7 2024, 8:43 AM
TAdeleye_WMF edited projects, added Trust and Safety Product Team; removed Anti-Harassment-Team.May 14 2024, 4:15 PM
kostajh closed subtask T362019: CannotCreateActorException when undeleting a page with IP contributors, with temporary accounts enabled as Resolved.May 24 2024, 1:04 PM
kostajh closed subtask T338836: How should blocks treat temporary users? as Resolved.Sep 8 2024, 7:31 PM
kostajh moved this task from Inbox to Ready on the Temporary accounts board.Sep 10 2024, 1:54 PM
• Dreamy_Jazz added a subtask: T373914: Update reassignEdits.php to prevent reassignment of edits to IP addresses when temporary accounts are enabled.Sep 11 2024, 1:56 PM
• Dreamy_Jazz added a subtask: T373318: CannotCreateActorException: Cannot create an actor for an IP user when temporary accounts are enabled.
Niharika closed subtask T339874: Show more helpful messages when temporary users can't access features as Resolved.Sep 18 2024, 8:04 AM
• mszabo changed the status of subtask T373318: CannotCreateActorException: Cannot create an actor for an IP user when temporary accounts are enabled from Open to In Progress.Sep 30 2024, 2:47 PM
kostajh closed subtask T373318: CannotCreateActorException: Cannot create an actor for an IP user when temporary accounts are enabled as Resolved.Nov 4 2024, 9:47 AM
kostajh closed subtask T373914: Update reassignEdits.php to prevent reassignment of edits to IP addresses when temporary accounts are enabled as Resolved.May 7 2025, 7:20 AM
• Dreamy_Jazz added a subtask: T339291: Should temp users be counted as registered & active users on Special:Statistics?.Aug 6 2025, 12:42 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits