Page MenuHomePhabricator

Log when a user views IP addresses for a temporary account
Closed, ResolvedPublic5 Estimated Story Points

Description

Essential reading

Parent task description: T325658: Log access to IP addresses of temporary accounts

This task

This task is for:

  • Logging whenever a user views IP addresses for a temporary account

What should be logged, and when?

See the parent task

How should we do this?

Similar to IPInfo - see the following patches:

Event Timeline

Change 916469 had a related patch set uploaded (by Tchanders; author: Tchanders):

[mediawiki/extensions/CheckUser@master] Log when a user views IP addresses used by a temporary account

https://gerrit.wikimedia.org/r/916469

Change 916469 merged by jenkins-bot:

[mediawiki/extensions/CheckUser@master] Log when a user views IP addresses used by a temporary account

https://gerrit.wikimedia.org/r/916469

@Tchanders I came across no issues from my testing. Here are some of the screenshots just showing some of the behaviors. I will move this to Done, thanks!

Test sites on: - GOOD, still logs it

  • Revision history
  • Special:Contributions
  • Special:Log
  • Special:Block
  • Special:RecentChanges
  • Special:Watchlist
  • Diff
  • Page information

Multiple IPs 8x with the same temp user- GOOD, still logs it

T335366_IPMasking_DockerLog_MultipleIPs.png (1ร—3 px, 909 KB)

Same IP 2x with same temp user- GOOD, still logs both IPs

User Rights
Just admin- yes, log
As long you have checkuser-temporary-account rights, it will log
W/o checkuser-temporary-account rights- it does not have Show IP therefore there will be no logs for it

Timestamp removed- GOOD, still logs it

T335366_IPMasking_DockerLog_TimestampRemove.png (1ร—3 px, 798 KB)

Blocked sitewide and partial, it does not have Show IP therefore there will be no logs for it
After unblocking- GOOD, still logs it

When IP has been removed- GOOD, still logs it

T335366_IPMasking_DockerLog_IPRemove.png (982ร—3 px, 842 KB)