Search is restricted to users who have private filter viewing rights. Trying to do a similar update with protected variable viewing rights would lock everyone out of this feature, as no one has the right yet. Instead, update the query to only return filters that the user has the right to see.
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Only return filters visible to user in search | mediawiki/extensions/AbuseFilter | master | +152 -0 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Restricted Task | |||||
| Resolved | kostajh | T294511 2021 Security Team wikireplicas audit | |||
| Declined | None | T284948 Raw IPs of logged-out users disclosed in wiki-replicas | |||
| Resolved | Niharika | T324492 Temporary accounts - MVP | |||
| Open | None | T326816 [Epic] Update features for temporary accounts | |||
| Resolved | Tchanders | T326869 Update TSP-owned products that may be affected by IP Masking | |||
| Resolved | • lbowmaker | T262321 IP Masking | |||
| Resolved | tstarling | T300263 [IP Masking] Create temporary account on first edit | |||
| Open | None | T307060 [Epic] Temporary account AbuseFilter support | |||
| Resolved | STran | T357772 Investigate: How will `ip_in_range` and `ip_in_ranges` function when temporary accounts are enabled | |||
| Resolved | STran | T363906 [Epic] Ensure filters that use PII-sensitive variables are protected | |||
| Resolved | STran | T367390 Add granular query restrictions for AbuseFilter filter search |
Event Timeline
Comment Actions
Change #1051349 had a related patch set uploaded (by STran; author: STran):
[mediawiki/extensions/AbuseFilter@master] Only return filters visible to user in search
Comment Actions
Change #1051349 merged by jenkins-bot:
[mediawiki/extensions/AbuseFilter@master] Only return filters visible to user in search
Comment Actions
Per the ticket Description, I have verified the new code has been implemented and is functioning and displaying as expected.
