The globalblock API allows users to modify and remove global blocks using a block ID. However, we should prevent the ability for the API to modify global autoblocks. This is to be consistent with MediaWiki core, which manages the global autoblocks via the system. Users should still be able to remove global autoblocks if they have the necessary rights to remove global blocks.
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| Prevent the 'globalblock' API modifying global autoblocks | Dreamy Jazz | mediawiki/extensions/GlobalBlocking | master | +57 -3 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Restricted Task | |||||
| Resolved | kostajh | T294511 2021 Security Team wikireplicas audit | |||
| Declined | None | T284948 Raw IPs of logged-out users disclosed in wiki-replicas | |||
| Resolved | • Niharika | T324492 Temporary accounts - MVP | |||
| Resolved | Madalina | T326816 [Epic] Update features for temporary accounts | |||
| Resolved | Dreamy_Jazz | T355286 [Epic] Globally blocking a temporary account should prevent further account creations | |||
| Resolved | Dreamy_Jazz | T368949 [Epic] Implement global autoblocks from global user blocks | |||
| Resolved | Dreamy_Jazz | T377230 Update GlobalBlocking interfaces to properly handle global autoblocks | |||
| Resolved | Dreamy_Jazz | T377390 Prevent the 'globalblock' API modifying global autoblocks |
Change #1080822 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):
[mediawiki/extensions/GlobalBlocking@master] Prevent the 'globalblock' API modifying global autoblocks
Change #1080822 merged by jenkins-bot:
[mediawiki/extensions/GlobalBlocking@master] Prevent the 'globalblock' API modifying global autoblocks