Page MenuHomePhabricator

Remove the AbuseFilter protected variables preference gate
Closed, ResolvedPublic

Description

Summary

AbuseFilter has a preference that needs to be checked for the user to be able to see protected variable values. This is no longer required after T387333: CheckUser should impose IP viewing restrictions on AbuseFilter's `unnamed_user_ip` protected variable and per WMF Legal saying we don't need this preference for other protected variables

Background

Acceptance criteria

  • Access to protected variable values does not require checking the AbuseFilter preference
  • The AbuseFilter preference used to gate access to protected variable values is removed
  • The preference values for the removed preference are cleaned up on WMF wikis using the associated maintenance script to avoid un-needed DB rows in the preference database tables

historical context

Adjust wording of "abusefilter-preference-protected-vars-view-agreement"

The i18n string for abusefilter-preference-protected-vars-view-agreement is currently Enable revealing IP addresses for temporary accounts in AbuseFilter. However, per the parent task, we'll have new protected variables that are not about revealing IP addresses. We should adjust this wording so that it is more generic.

Related Objects

Event Timeline

  • make the wording more generic ("Enable viewing protected variables")
  • include a link to documentation

We may need to consider if this preference text needs to be similar to the one provided by CheckUser on WMF wikis.

STran renamed this task from Adjust wording of "abusefilter-preference-protected-vars-view-agreement" to Remove the AbuseFilter protected variables preference gate.Feb 5 2025, 10:56 AM
STran updated the task description. (Show Details)

Change #1131056 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/AbuseFilter@master] [WIP] Drop 'abusefilter-protected-vars-view-agreement' preference

https://gerrit.wikimedia.org/r/1131056

Change #1131062 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/CheckUser@master] [WIP] Drop AbuseFilter access change log handling

https://gerrit.wikimedia.org/r/1131062

Change #1133121 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/CheckUser@master] Don't set 'abusefilter-protected-vars-view-agreement' preference

https://gerrit.wikimedia.org/r/1133121

Change #1131062 merged by jenkins-bot:

[mediawiki/extensions/CheckUser@master] Drop AbuseFilter access change log handling

https://gerrit.wikimedia.org/r/1131062

Change #1131056 merged by jenkins-bot:

[mediawiki/extensions/AbuseFilter@master] Drop 'abusefilter-protected-vars-view-agreement' preference

https://gerrit.wikimedia.org/r/1131056

Change #1133121 merged by jenkins-bot:

[mediawiki/extensions/CheckUser@master] Don't set 'abusefilter-protected-vars-view-agreement' preference

https://gerrit.wikimedia.org/r/1133121

QA'ing that user_unnamed_ip access still depends on checking a preference is done through T387331.

As such, in this ticket you only need to QA that the AbuseFilter protected variables preference has been removed and that no code uses the value of the preference. Note that some interface messages may still refer to a preference, which will be updated through T389640.

Djackson-ctr subscribed.

QA is completed, I have verified (Abuse Filter Preference and respective code has been removed).

Noting here that the AbuseFilter option available in local preference pages on Meta-Wiki and Test Wikipedia (for example) is not available as it might have been merged with the Temporary account IP reveal tick option.

Noting here that the AbuseFilter option available in local preference pages on Meta-Wiki and Test Wikipedia (for example) is not available as it might have been merged with the Temporary account IP reveal tick option.

Yes, that was the intended outcome of this task.