Page MenuHomePhabricator

Allow administrators to view the usernames of the full list of participants of an event
Closed, ResolvedPublic3 Estimated Story Points

Description

NOTE: Before this change is implemented, we need to update community members and wikis about this change. This includes on the project page, event organizer Telegram group, and reaching out to organizers directly who have used our tools to let them know.

Background: During the discussion to enable CampaignsEvent at Wikipedia in Spanish, an admin pointed that private registration of participants can add difficulty to the patrolling activity regarding a given event. This is because the admins only know who registered publicly -- not everyone who registered.

This admin considers that not being able to transparently and publicly access the full list of participants (in case of private registrations), hypothetical problems with events (like mass creation of new articles without sources, deletion of promotional articles, protests about quick deletions that do not allow time to improve articles, etc.) could not be prevented or solved and the community would not be able to apply sanctions in case of tag violations, nor would be aware of any misuse of permission or transgressions of the Universal Code of Conduct.

Since it is important to protect the privacy of participants, we might consider to grant admins with the power to see the full list of usernames of the participants (included those who registered in private), as a possible solution to reduce the difficulties for patrolling, while maintaining the privacy of the participants in front of the rest of the community.

Acceptance Criteria:

  • Given that an organizer creates a new event,
    • When users register, they should see the following text about private registration: “Private registration: Your username in the participant list can only be seen by the event organizers and members of the following user groups: [user groups listed here]. Your contributions during the event may be excluded by the organizers on the Programs & Events Dashboard or other tools to collect statistics.”
      • And if a user registers privately,
        • Their username and private status (i.e., lock icon next to username) should be displayed to admins
        • Their username and private status (i.e., lock icon next to username) should remain displayed to event organizers
  • The [user groups listed here] part should be generated in the same way as the list used in the badaccess-groups message (for a real-world example, see https://en.wikipedia.org/wiki/Special:DeletedContributions while logged out)
  • If a wiki has configured to have only event organizers view private registration, then the first sentence of the text should end after "...event organizers."
  • We will have as default that admins are the only new user group added to be able to see private registration, but wiki communities can choose to assign the new right to other user groups, if they want
  • This should only be released AFTER communications finished on the change (confirm with Ilana)

Event Timeline

IZapico-WMF renamed this task from Allow administrators to view the usernames of the full list of participants in an event to Allow administrators to view the usernames of the full list of participants of an event.Oct 1 2024, 12:22 AM
ifried updated the task description. (Show Details)
ifried updated the task description. (Show Details)
ifried set the point value for this task to 3.
ifried updated the task description. (Show Details)

@ifried

We will have as default that admins are the only new user group addd to be able to see private registration, but we will implement this feature change in such a way that wiki communities can choose to have other user groups view private registration usernames, if they want

What is the expectation here, does this imply community configuration?

Daimona subscribed.

@ifried

We will have as default that admins are the only new user group addd to be able to see private registration, but we will implement this feature change in such a way that wiki communities can choose to have other user groups view private registration usernames, if they want

What is the expectation here, does this imply community configuration?

I've updated the AC, it means that the user right can in theory be assigned to groups other than administrators, so we'll effectively only be setting a default (=admins get it).

Change #1125980 had a related patch set uploaded (by Mhorsey; author: Mhorsey):

[mediawiki/extensions/CampaignEvents@master] allow administrators to view private registrations

https://gerrit.wikimedia.org/r/1125980

@ifried This patch is ready, please let us know when the communications are planned so we can merge/release appropriately

That is great news, @MHorsey-WMF! The ambassadors are working on the translation of the announcement now, and we should be ready to begin sharing the announcement in the next few days. One question: Do we have a release date? This is the last missing piece that we need in order to announce the change.

Assuming that everything is ok for QA (CC: @vaughnwalters ) we can hit the button any time and push it out in the following train

Okay, great, @MHorsey-WMF! We will need to have a release date in order to share the announcement. So we should prioritize getting the code review complete and then into QA.

Change #1129835 had a related patch set uploaded (by Mhorsey; author: Mhorsey):

[mediawiki/extensions/CampaignEvents@master] Allow administrators to view private participants

https://gerrit.wikimedia.org/r/1129835

Change #1125980 merged by jenkins-bot:

[mediawiki/extensions/CampaignEvents@master] Add user right to view private registrations

https://gerrit.wikimedia.org/r/1125980

@vaughnwalters QA notes: for now, the new right is not assigned to administrators by default. You can change that by adding $wgGroupPermissions['sysop']['campaignevents-view-private-participants'] = true; to your LocalSettings.php. Once you're done, this task should come back to "Devleopment in Progress" for the prod release. Thank you!

Acceptance Criteria:

  • Given that an organizer creates a new event,
    • ✅ When users register, they should see the following text about private registration: “Private registration: Your username in the participant list can only be seen by the event organizers and members of the following user groups: [user groups listed here]. Your contributions during the event may be excluded by the organizers on the Programs & Events Dashboard or other tools to collect statistics.”
    • Screenshot 2025-03-25 at 5.27.36 PM.png (470×798 px, 78 KB)
      • And if a user registers privately,
        • ✅ Their username and private status (i.e., lock icon next to username) should be displayed to admins
          Screenshot 2025-03-25 at 5.28.51 PM.png (910×1 px, 144 KB)
        • ✅ Their username and private status (i.e., lock icon next to username) should remain displayed to event organizers
          Screenshot 2025-03-25 at 5.29.13 PM.png (708×1 px, 88 KB)
  • ✅ The [user groups listed here] part should be generated in the same way as the list used in the badaccess-groups message (for a real-world example, see https://en.wikipedia.org/wiki/Special:DeletedContributions while logged out)
  • ✅ If a wiki has configured to have only event organizers view private registration, then the first sentence of the text should end after "...event organizers."
    Screenshot 2025-03-25 at 5.33.07 PM.png (574×1 px, 97 KB)
  • We will have as default that admins are the only new user group added to be able to see private registration, but wiki communities can choose to assign the new right to other user groups, if they want
  • This should only be released AFTER communications finished on the change (confirm with Ilana)

❌ The text correct when a user is registering privately on the event page. But, when a user is registering on Special:RegisterForEvent/{x} then there is no text at all. This AC doesn't specify that this should only be on the event page, so noting it here.

Screenshot 2025-03-25 at 5.35.12 PM.png (600×2 px, 78 KB)

❌ The text correct when a user is registering privately on the event page. But, when a user is registering on Special:RegisterForEvent/{x} then there is no text at all. This AC doesn't specify that this should only be on the event page, so noting it here.

Yes, this is expected, and that work is tracked in T323949.

BTW, I've approved the patch to assign the right to administrators by default, but it currently can't be merged due to unrelated CI issues. I pushed a workaround to unblock this quickly while also working on a proper fix in parallel.

Change #1129835 merged by jenkins-bot:

[mediawiki/extensions/CampaignEvents@master] Allow administrators to view private participants

https://gerrit.wikimedia.org/r/1129835

Now available for administrators by default in beta, and reaching production with the next train (wmf.23).

Confirming that private users are shown to organizers and admins in betacluster also (along with local tests at T376089#10676512). I won't be able to fully test this in prod because I don't have admin access, but am keeping it in QA until it goes live with the train and will test as a user and organizer.

In prod, confirming that private users are still shown to organizers and that private users are not show to non-organizers. I can't fully test this in prod because I don't have admin access. Sending to product sign off