Page MenuHomePhabricator

Hide the value of gbw_address in the public replicas if the associated globalblocks table row has gb_autoblock_parent_id as not null
Closed, DeclinedPublic2 Estimated Story Points

Description

The gbw_address should be hidden from public replicas if the value of the gb_autoblock_parent_id column is not null for the associated globalblocks row. This is to ensure that the IP that was autoblocked is not visible, in a similar way that the bt_address column is hidden if bt_auto is set to 1.

This probably involves updating https://gerrit.wikimedia.org/g/operations/puppet/+/de042c8e3894b03f9b28b42a391d4d1e0c30e0d2/modules/profile/templates/wmcs/db/wikireplicas/maintain-views.yaml to have a custom view.

Acceptance critera
  • Ensure that the gbw_address column is hidden from public replicas when the associated gb_autoblock_parent_id column is not null

Event Timeline

Dreamy_Jazz renamed this task from Hide the value of gbw_address in the global_block_whitelist table if the associated gb_id has gb_autoblock_parent_id as not null to Hide the value of gbw_address in the public replicas if the associated gb_id has gb_autoblock_parent_id as not null.Sep 16 2024, 3:51 PM
Dreamy_Jazz renamed this task from Hide the value of gbw_address in the public replicas if the associated gb_id has gb_autoblock_parent_id as not null to Hide the value of gbw_address in the public replicas if the associated globalblocks table row has gb_autoblock_parent_id as not null.

This won't work because the globalblocks table is not on the same database as the global_block_whitelist tables, so when constructing the view it will fail to generate it.

Instead of hiding rows in that table, we should remove the gbw_address and gbw_target_central_id columns. This is possible because the code which checks for a local disable always uses the gbw_id to look for the relevant entry.