Page MenuHomePhabricator
Create Task
Maniphest T356924

Deploy global account blocks to WMF wikis
Closed, ResolvedPublic1 Estimated Story Points
Actions

Description

Once global account blocking is working we should deploy it progressively on WMF wikis using the configuration added in T356923: Create a configuration value to control whether global account blocks are enabled.

The deployment plan is to:

  1. Request feedback from stewards, allowing them to test the feature on beta wikis (T367647)
  2. Deploy to all wikis at once, due to the confusing nature of global blocks not applying to all wikis

Stewards will test on production carefully using their own accounts first. Once the feature is confirmed to be stable, it will be used by the stewards. Points on whether stewards can use the tool under global policy would be addressed by the community separately.

Details

SubjectRepoBranchLines +/-
[GlobalBlocking] Enable global account blocks on all wikisoperations/mediawiki-configmaster+1 -1
Pin wgGlobalBlockingAllowGlobalAccountBlocks as false on WMF wikisoperations/mediawiki-configmaster+14 -0
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
Restricted Task
 ResolvedkostajhT294511 2021 Security Team wikireplicas audit
 DeclinedNoneT284948 Raw IPs of logged-out users disclosed in wiki-replicas
 In ProgressNiharikaT324492 Temporary accounts - MVP
 OpenNoneT326816 Update features for temporary accounts
 OpenNoneT355286 [Epic] Globally blocking a temporary account should prevent further account creations
 OpenDreamy_JazzT368949 Implement global autoblocks from global user blocks
 OpenNoneT19929 CentralAuth account locks should trigger global autoblocks
 DuplicateNoneT340275 Allow GlobalBlocking to block temporary accounts
 OpenFeatureDreamy_JazzT17294 Allow globally blocking of accounts
 OpenDreamy_JazzT358777 Rename messages with the '-new' suffix to remove this suffix
 ResolvedDreamy_JazzT358776 Remove old versions of GlobalBlocking i18n messages
 ResolvedDreamy_JazzT358773 Remove the global accounts block configuration flag
 ResolvedDreamy_JazzT356924 Deploy global account blocks to WMF wikis
 ResolvedDreamy_JazzT356926 Add support to block global accounts using the globalblock API
 ResolvedDreamy_JazzT356929 Allow SpecialRemoveGlobalBlock to remove a global block on an account
 ResolvedDreamy_JazzT356931 Support modifying the status of global blocks on accounts using Special:GlobalBlockStatus
 ResolvedDreamy_JazzT356932 Allow Special:GlobalBlockList to show global blocks for accounts
 ResolvedDreamy_JazzT359584 Provide action links on Special:Log for global block entries
 ResolvedDreamy_JazzT356934 Allow a user to perform global blocks on accounts using Special:GlobalBlock
 ResolvedBUG REPORTDreamy_JazzT366352 The "Locally block anonymous users only" checkbox is not properly disabled when it is made visible
 ResolvedDreamy_JazzT356935 The 'globalblocks' API should support listing global blocks for accounts
 ResolvedTchandersT360516 Periodically remove orphaned global_block_whitelist entries
 ResolvedDreamy_JazzT360621 Test and make improvements to the fixGlobalBlockWhitelist.php script
 ResolvedDreamy_JazzT366386 Update GlobalBlockingHooks to support global account blocks
 ResolvedDreamy_JazzT356936 Update GlobalBlocking services to support global block on accounts
 ResolvedDreamy_JazzT358150 Update the GlobalBlockLocalStatusLookup and GlobalBlockLocalStatusManager services to support blocking accounts
 ResolvedDreamy_JazzT358157 Update the GlobalBlockManager service to support global blocks on accounts
 ResolvedDreamy_JazzT358155 Update GlobalBlockLookup service to support global blocks on accounts
 ResolvedDreamy_JazzT356876 Add a column to store central ID in globalblocks and global_block_whitelist tables
 Resolved• MarosteguiT356987 Add gb_target_central_id to the globalblocks table on the centralauth DB
 Resolved• MarosteguiT356988 Add gbw_target_central_id to global_block_whitelist table on WMF wikis
 ResolvedDreamy_JazzT356922 Deprecate unnecessary GlobalBlocking hooks
 ResolvedDreamy_JazzT359091 Create GlobalBlockLocalStatusManager service
 ResolvedDreamy_JazzT358865 Use non-legacy log parameters for log entries for global blocking and unblocking
 ResolvedDreamy_JazzT358725 Update the GlobalBlockingLinkBuilder service for global account blocks
 ResolvedDreamy_JazzT356923 Create a configuration value to control whether global account blocks are enabled
 ResolvedDreamy_JazzT356925 Update or duplicate GlobalBlocking messages to allow staged deployment of blocking accounts
 ResolvedDreamy_JazzT357385 Refactor the GlobalBlocking utility class into services
 ResolvedDreamy_JazzT357399 Create GlobalBlockingConnectionProvider
 ResolvedDreamy_JazzT357443 Create GlobalBlockingBlockPurger service
 ResolvedDreamy_JazzT357506 Create GlobalBlockLocalStatusLookup service
 ResolvedDreamy_JazzT357675 Create GlobalBlockLookup service
 ResolvedDreamy_JazzT357925 Create the GlobalBlockManager service
 ResolvedDreamy_JazzT366921 GlobalBlockingHooks::onSpecialPasswordResetOnSubmit is never called
 Resolved• UrbanecmT367647 Review global blocks from a Steward perspective
 ResolvedBUG REPORTDreamy_JazzT369799 Special:GlobalBlockList shows "IP address" as label for target field when global account blocks are enabled

Event Timeline

Dreamy_Jazz created this task.Feb 7 2024, 9:58 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFeb 7 2024, 9:58 PM
Dreamy_Jazz added a parent task: T17294: Allow globally blocking of accounts.Feb 7 2024, 9:58 PM
Dreamy_Jazz added a subtask: T356923: Create a configuration value to control whether global account blocks are enabled.
Dreamy_Jazz added a subtask: T356925: Update or duplicate GlobalBlocking messages to allow staged deployment of blocking accounts.Feb 7 2024, 10:01 PM
Dreamy_Jazz added a subtask: T356926: Add support to block global accounts using the globalblock API.Feb 7 2024, 10:15 PM
Dreamy_Jazz added a subtask: T356929: Allow SpecialRemoveGlobalBlock to remove a global block on an account.Feb 7 2024, 10:17 PM
Dreamy_Jazz added a subtask: T356922: Deprecate unnecessary GlobalBlocking hooks.
Dreamy_Jazz added a subtask: T356931: Support modifying the status of global blocks on accounts using Special:GlobalBlockStatus.Feb 7 2024, 10:22 PM
Dreamy_Jazz added a subtask: T356932: Allow Special:GlobalBlockList to show global blocks for accounts.Feb 7 2024, 10:25 PM
Dreamy_Jazz added a subtask: T356934: Allow a user to perform global blocks on accounts using Special:GlobalBlock.Feb 7 2024, 10:27 PM
Dreamy_Jazz added a subtask: T356935: The 'globalblocks' API should support listing global blocks for accounts.
Dreamy_Jazz removed a subtask: T356922: Deprecate unnecessary GlobalBlocking hooks.Feb 7 2024, 10:35 PM
gerritbot added a comment.Feb 21 2024, 9:48 PM

Change 1005607 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[operations/mediawiki-config@master] Pin wgGlobalBlockingAllowGlobalAccountBlocks as false on WMF wikis

https://gerrit.wikimedia.org/r/1005607

gerritbot added a project: Patch-For-Review.Feb 21 2024, 9:48 PM
gerritbot added a comment.Feb 21 2024, 9:58 PM

Change 1005607 merged by jenkins-bot:

[operations/mediawiki-config@master] Pin wgGlobalBlockingAllowGlobalAccountBlocks as false on WMF wikis

https://gerrit.wikimedia.org/r/1005607

Stashbot added a comment.Feb 21 2024, 9:58 PM

Mentioned in SAL (#wikimedia-operations) [2024-02-21T21:58:25Z] <dreamyjazz@deploy2002> Started scap: Backport for [[gerrit:1005607|Pin wgGlobalBlockingAllowGlobalAccountBlocks as false on WMF wikis (T356923 T356924)]]

Stashbot mentioned this in T356923: Create a configuration value to control whether global account blocks are enabled.Feb 21 2024, 9:58 PM

Mentioned in SAL (#wikimedia-operations) [2024-02-21T21:59:58Z] <dreamyjazz@deploy2002> dreamyjazz: Backport for [[gerrit:1005607|Pin wgGlobalBlockingAllowGlobalAccountBlocks as false on WMF wikis (T356923 T356924)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Feb 21 2024, 10:08 PM

Mentioned in SAL (#wikimedia-operations) [2024-02-21T22:08:42Z] <dreamyjazz@deploy2002> Finished scap: Backport for [[gerrit:1005607|Pin wgGlobalBlockingAllowGlobalAccountBlocks as false on WMF wikis (T356923 T356924)]] (duration: 10m 16s)

Maintenance_bot removed a project: Patch-For-Review.Feb 21 2024, 10:30 PM
Dreamy_Jazz removed a subtask: T356923: Create a configuration value to control whether global account blocks are enabled.Feb 21 2024, 10:43 PM
Dreamy_Jazz removed a subtask: T356925: Update or duplicate GlobalBlocking messages to allow staged deployment of blocking accounts.
Dreamy_Jazz removed a subtask: T358773: Remove the global accounts block configuration flag.Feb 29 2024, 3:43 PM
Dreamy_Jazz added a parent task: T358773: Remove the global accounts block configuration flag.
Dreamy_Jazz closed subtask T356931: Support modifying the status of global blocks on accounts using Special:GlobalBlockStatus as Resolved.Mar 27 2024, 9:36 AM
Dreamy_Jazz added a subtask: T360621: Test and make improvements to the fixGlobalBlockWhitelist.php script.Mar 27 2024, 9:41 AM
Dreamy_Jazz added a subtask: T360516: Periodically remove orphaned global_block_whitelist entries.
Dreamy_Jazz removed a subtask: T360621: Test and make improvements to the fixGlobalBlockWhitelist.php script.
Dreamy_Jazz closed subtask T360516: Periodically remove orphaned global_block_whitelist entries as Resolved.Apr 23 2024, 10:54 AM
Dreamy_Jazz closed subtask T356934: Allow a user to perform global blocks on accounts using Special:GlobalBlock as Resolved.Jun 3 2024, 10:09 AM
• Urbanecm added a subtask: T367647: Review global blocks from a Steward perspective.Jun 15 2024, 10:49 PM
Dreamy_Jazz closed subtask T356926: Add support to block global accounts using the globalblock API as Resolved.Jun 18 2024, 1:49 PM
Dreamy_Jazz closed subtask T356929: Allow SpecialRemoveGlobalBlock to remove a global block on an account as Resolved.
Dreamy_Jazz closed subtask T366386: Update GlobalBlockingHooks to support global account blocks as Resolved.Jun 21 2024, 1:29 PM
Dreamy_Jazz updated the task description. (Show Details)Jun 25 2024, 2:05 PM
gerritbot added a comment.Jun 26 2024, 12:00 PM

Change #1049915 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[operations/mediawiki-config@master] [GlobalBlocking] Enable global account blocks on all wikis

https://gerrit.wikimedia.org/r/1049915

gerritbot added a project: Patch-For-Review.Jun 26 2024, 12:00 PM
Dreamy_Jazz updated the task description. (Show Details)Wed, Jul 10, 8:59 AM
Dreamy_Jazz added a subtask: T369799: Special:GlobalBlockList shows "IP address" as label for target field when global account blocks are enabled.Thu, Jul 11, 9:23 AM
Dreamy_Jazz closed subtask T369799: Special:GlobalBlockList shows "IP address" as label for target field when global account blocks are enabled as Resolved.Fri, Jul 12, 5:01 AM
Dreamy_Jazz closed subtask T356932: Allow Special:GlobalBlockList to show global blocks for accounts as Resolved.
• Urbanecm closed subtask T367647: Review global blocks from a Steward perspective as Resolved.Mon, Jul 15, 12:19 PM
Dreamy_Jazz claimed this task.Tue, Jul 16, 10:02 PM
Dreamy_Jazz added a project: Trust and Safety Product Sprint (Sprint Koto (July 15 - July 26)).
Dreamy_Jazz set the point value for this task to 1.
Dreamy_Jazz moved this task from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Koto (July 15 - July 26)) board.Tue, Jul 16, 10:15 PM
Dreamy_Jazz moved this task from In Progress to Ready on the Trust and Safety Product Sprint (Sprint Koto (July 15 - July 26)) board.
Tchanders closed subtask T356935: The 'globalblocks' API should support listing global blocks for accounts as Resolved.Wed, Jul 17, 4:45 AM
gerritbot added a comment.Thu, Jul 18, 12:30 PM

Change #1049915 merged by jenkins-bot:

[operations/mediawiki-config@master] [GlobalBlocking] Enable global account blocks on all wikis

https://gerrit.wikimedia.org/r/1049915

Stashbot added a comment.Thu, Jul 18, 12:30 PM

Mentioned in SAL (#wikimedia-operations) [2024-07-18T12:30:52Z] <dreamyjazz@deploy1002> Started scap sync-world: Backport for [[gerrit:1049915|[GlobalBlocking] Enable global account blocks on all wikis (T356924)]]

Maintenance_bot removed a project: Patch-For-Review.Thu, Jul 18, 12:31 PM
Stashbot added a comment.Thu, Jul 18, 12:34 PM

Mentioned in SAL (#wikimedia-operations) [2024-07-18T12:34:01Z] <dreamyjazz@deploy1002> dreamyjazz: Backport for [[gerrit:1049915|[GlobalBlocking] Enable global account blocks on all wikis (T356924)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Thu, Jul 18, 12:40 PM

Mentioned in SAL (#wikimedia-operations) [2024-07-18T12:40:03Z] <dreamyjazz@deploy1002> Finished scap: Backport for [[gerrit:1049915|[GlobalBlocking] Enable global account blocks on all wikis (T356924)]] (duration: 09m 10s)

Dreamy_Jazz closed this task as Resolved.Thu, Jul 18, 7:43 PM
Dreamy_Jazz updated the task description. (Show Details)
Dreamy_Jazz moved this task from Ready to Done on the Trust and Safety Product Sprint (Sprint Koto (July 15 - July 26)) board.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits