Page MenuHomePhabricator

Stop API from returning excess IPs on user request
Closed, DeclinedPublic

Description

As part of T327946: Admins and checkusers unveil all IPs on the page for a temp account by clicking one button, URLs batch rev ids to request from the API for the checkuser use case. Incidentally, non-checkuser users will also get the IP information in the API request although the UI won't reflect it. The API shouldn't return any IPs that the UI doesn't expect to show.

AC:

  • API no longer returns extraneous IPs

Event Timeline

Change 904749 had a related patch set uploaded (by STran; author: STran):

[mediawiki/extensions/CheckUser@master] Allow for overrides in the ip reveal pub sub system

https://gerrit.wikimedia.org/r/904749

Changes in product reqs make this ticket obsolete. All users will be allowed to batch call rev ids and no user case is expected to use a single rev id call anymore.

Change 904749 abandoned by STran:

[mediawiki/extensions/CheckUser@master] Allow for overrides in the ip reveal pub sub system

Reason:

Product requirements have changed

https://gerrit.wikimedia.org/r/904749