Change #1107936 had a related patch set uploaded (by Novem Linguae; author: Novem Linguae):

[operations/mediawiki-config@master] enable 2 factor authentication for enwiki page movers

https://gerrit.wikimedia.org/r/1107936

A discussion on English Wikipedia reached a consensus to allow the page mover group to enable two-factor authentication.

To be honest, I’m not sure this is the right group to decide on the consensus? As I understand it, a major reason for not enabling 2FA for all users is that the process to reset 2FA is manual, and the resources of the group/team (idk who – edit: Trust&Safety according to meta?) to handle 2FA reset requests are limited. So I feel like they should also get a say on whether they can handle more users having 2FA on their accounts…?

But happy to hear other opinions here.

Skimming the enwiki discussion, I can see that @Novem_Linguae raised the same concern and already courtesy-pinged @jrbs there.

How about we plop this on the T&S Phabricator board and say it’s good to go if they don’t object in, say, two more weeks? (Now that the holiday break is mostly over.)

To provide a sense of scale for this config change: the number of people eligible for turning on 2FA (edit: on enwiki) would increase from 1043 to 1384 (by 33%).

mysql:research@dbstore1008.eqiad.wmnet [enwiki]> SELECT COUNT(DISTINCT ug_user) FROM user_groups WHERE ug_group IN ('sysop', 'interface-admin', 'bureaucrat', 'suppress', 'import', 'transwiki', 'founder', 'checkuser', 'templateeditor', 'abusefilter')\G
*************************** 1. row ***************************
COUNT(DISTINCT ug_user): 1043
1 row in set (0.003 sec)

mysql:research@dbstore1008.eqiad.wmnet [enwiki]> SELECT COUNT(DISTINCT ug_user) FROM user_groups WHERE ug_group IN ('sysop', 'interface-admin', 'bureaucrat', 'suppress', 'import', 'transwiki', 'founder', 'checkuser', 'templateeditor', 'abusefilter', 'extendedmover')\G
*************************** 1. row ***************************
COUNT(DISTINCT ug_user): 1384
1 row in set (0.004 sec)

It's now been two weeks with no comment from T&S.

Acknowledged; as far as I’m concerned the change is good to go and can be scheduled for deployment again.

I've just asked in WMF Slack if anyone from T&S objects to this.

Change #1107936 merged by jenkins-bot:

[operations/mediawiki-config@master] enable 2 factor authentication for enwiki page movers

https://gerrit.wikimedia.org/r/1107936

Mentioned in SAL (#wikimedia-operations) [2025-01-21T14:38:35Z] <lucaswerkmeister-wmde@deploy2002> Started scap sync-world: Backport for [[gerrit:1107936|enable 2 factor authentication for enwiki page movers (T382879)]]

Mentioned in SAL (#wikimedia-operations) [2025-01-21T14:45:05Z] <lucaswerkmeister-wmde@deploy2002> novemlinguae, lucaswerkmeister-wmde: Backport for [[gerrit:1107936|enable 2 factor authentication for enwiki page movers (T382879)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Mentioned in SAL (#wikimedia-operations) [2025-01-21T14:54:45Z] <lucaswerkmeister-wmde@deploy2002> Finished scap sync-world: Backport for [[gerrit:1107936|enable 2 factor authentication for enwiki page movers (T382879)]] (duration: 16m 10s)