Temporary accounts: Remove autopromote configuration for temporary-account-viewer
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	kostajh
	May 5 2025, 8:54 AM

Description

Summary

Remove the autopromote mechanism currently in use for temporary-account-viewer, because we are migrating to a process of manually granting the right.

Background

As noted in T325451, we are no longer autopromoting users into temporary-account-viewer, in favor of manually assigning the right.

Technical notes

Remove the $wgAutopromoteOnce['onEdit']['temporary-account-viewer'] block in operations/mediawiki-config

Acceptance criteria

Users with over 300 edits and 6 months of account age are no longer autopromoted to the temporary-account-viewer group

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	temp accounts: Remove AutopromoteOnce configuration	operations/mediawiki-config	master	+0 -27

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
		Restricted Task
Resolved	kostajh	T294511 2021 Security Team wikireplicas audit
Declined	None	T284948 Raw IPs of logged-out users disclosed in wiki-replicas
Resolved	Niharika	T324492 Temporary accounts - MVP
In Progress	Niharika	T325451 [Epic] Users with right privileges are able to view IP addresses
Resolved	kostajh	T393358 Temporary accounts: Remove autopromote configuration for temporary-account-viewer

Event Timeline

kostajh created this task.May 5 2025, 8:54 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 5 2025, 8:54 AM

kostajh claimed this task.May 7 2025, 6:27 AM

kostajh moved this task from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Key Lime Pie (May 5 - May 23)) board.

Change #1142858 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):

[operations/mediawiki-config@master] temp accounts: Remove AutopromoteOnce configuration

https://gerrit.wikimedia.org/r/1142858

gerritbot added a project: Patch-For-Review.May 7 2025, 6:33 AM

Change #1142858 merged by jenkins-bot:

[operations/mediawiki-config@master] temp accounts: Remove AutopromoteOnce configuration

https://gerrit.wikimedia.org/r/1142858

Mentioned in SAL (#wikimedia-operations) [2025-05-08T13:17:42Z] <tchanders@deploy1003> Started scap sync-world: Backport for [[gerrit:1142858|temp accounts: Remove AutopromoteOnce configuration (T393358)]]

Mentioned in SAL (#wikimedia-operations) [2025-05-08T13:24:32Z] <tchanders@deploy1003> tchanders, kharlan: Backport for [[gerrit:1142858|temp accounts: Remove AutopromoteOnce configuration (T393358)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Maintenance_bot removed a project: Patch-For-Review.May 8 2025, 1:30 PM

Mentioned in SAL (#wikimedia-operations) [2025-05-08T13:34:12Z] <tchanders@deploy1003> Finished scap sync-world: Backport for [[gerrit:1142858|temp accounts: Remove AutopromoteOnce configuration (T393358)]] (duration: 16m 30s)

For QA, I would suggest reviewing the logs on pilot wikis and ensuring that no new autopromotions have happened to the temporary-account-viewer group since the patch was deployed.

Tchanders moved this task from Backlog to In progress on the Temporary accounts (Major pilot wiki deployment) board.May 13 2025, 12:30 PM

QA is completed... new code changes have been implemented (Autopromote configuration for temporary-account-viewer has been removed).

Dreamy_Jazz closed this task as Resolved.May 21 2025, 12:50 PM

Temporary accounts: Remove autopromote configuration for temporary-account-viewerClosed, ResolvedPublicActions