Page MenuHomePhabricator

Automatically Remove Associated Local and Global User Rights When an Account is Vanished
Open, Needs TriagePublicFeature

Description

When a user's account is vanished, it's locked globally, but the associated local and global user rights are not automatically removed. Instead, stewards and sysops need to manually revoke these rights.

Since a vanished account is locked and not intended for use again, it makes sense that all associated rights should be automatically removed when the account is locked.

Benefits:

  • No need for stewards to manually remove rights, reducing administrative workload.
  • Ensures that all rights are removed consistently across all wikis.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Ideally this should be an dedicated feature inside CentralAuth, not just part of vanishing feature.

  • When an account is locked as being globally banned (by community or foundation), we should also remove all local and global groups.
  • We should also remove rights of departed WMF staffs
  • Ditto for accounts locked as owner is died.
  • When account is locked for other reason (e.g. cross-wiki abuse), the current practice is global rights are removed, but local rights are left as-is to allow local wikis to manage. So we need an option to remove global rights only.

In addition, such removal should be logged in each wiki the right is removed.