Page MenuHomePhabricator

Make it clear that cross-wiki permission checking in Special:GlobalContributions is not ideal
Closed, ResolvedPublic1 Estimated Story Points

Description

Background

Special:GlobalContributions checks permissions at external wikis, since T356294: Restrict which groups have access to Special:GlobalContributions.

It does this by making API calls to the other wikis, since there is no better way yet to check cross-wiki permissions. This is not ideal, because:

  • Making API calls is slow, so it increases page load time
  • API calls may fail (in which case we just assume they don't have the permissions)

Although we can't improve on this yet, we should make it clear that this is a hack.

Acceptance criteria
  • Add comments in the code that make it clear that using the API calls is a hack and not ideal.
  • File a task to make platform improvements in cross-wiki permission checking, and cite that task in the comments.

Event Timeline

Change #1098039 had a related patch set uploaded (by Tchanders; author: Tchanders):

[mediawiki/extensions/CheckUser@master] Add comments to explain that API permissions lookups are not ideal

https://gerrit.wikimedia.org/r/1098039

  • Add comments in the code that make it clear that using the API calls is a hack and not ideal.

Done in https://gerrit.wikimedia.org/r/1098039

  • File a task to make platform improvements in cross-wiki permission checking, and cite that task in the comments.

T380867: Allow looking up permissions directly across multiple wikis

Change #1098039 merged by jenkins-bot:

[mediawiki/extensions/CheckUser@master] Add comments to explain that API permissions lookups are not ideal

https://gerrit.wikimedia.org/r/1098039