We need to find out how the IP masking work affects the Wikidata Bridge. For details see parent tickets.
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Restricted Task | |||||
| Resolved | kostajh | T294511 2021 Security Team wikireplicas audit | |||
| Declined | None | T284948 Raw IPs of logged-out users disclosed in wiki-replicas | |||
| Resolved | Niharika | T324492 Temporary accounts - MVP | |||
| Resolved | Madalina | T326816 [Epic] Update features for temporary accounts | |||
| Open | None | T326908 Update WMDE Engineering-owned products that may be affected by IP Masking | |||
| Resolved | ItamarWMDE | T328454 [TECH][IPM] Investigate ramifications of IP masking on Wikidata related extensions | |||
| Resolved | Arlolra | T272186 Update extensions to handle the new media structure | |||
| Open | None | T354750 Update Wikidata Bridge for new media DOM structure | |||
| Resolved | Lydia_Pintscher | T343786 [TECH][IPM] Investigate ramifications of IP masking on Wikidata Bridge |
Event Timeline
T350039: API action=query&prop=info&intestactions=edit&intestactionsdetail=full and intestactionsdetail=boolean report that logged-out users can't edit pages when temp accounts are enabled would probably affect us, IIRC Wikidata Bridge uses that API to check whether the user is allowed to use data bridge or not. (But I’m hopeful that it will be fixed and we won’t have to work around it. Just leaving a note here for now.)
While this task is technically not a bug in itself, we need to be mindful of T351968#9602082 if we decide to "renable" Wikidata Bridge soon by fixing bug T354750 before the Temporary Accounts/IP Masking feature has been rolled out to all Wikimedia Wikis.
Is there any more investigation to be done here? Temporary accounts are enabled on test.wikipedia.org but not test.wikidata.org, so that might be a good place to verify the impact.
@Lydia_Pintscher @Lucas_Werkmeister_WMDE Hi! We are going to do another round of deployment for temporary accounts on 10-12 medium-large projects from mid through end of June. Please review/close this task as needed.
I think the decision that’s been made here, through inaction if nothing else, is that Wikidata Bridge will stay in its current broken state for now (due to T354750), in which case it doesn’t matter if it doesn’t support temporary accounts / IP masking yet. When the Wikidata Integrations Team resumes work on Wikidata Bridge, then they can check what the impact is, but at that point the problems from T351968#9602082 will hopefully not matter anymore because temporary accounts will have fully rolled out by then.