Page MenuHomePhabricator

Allow Security Team members to see MFA status of a Phab user account
Open, LowPublicFeature

Description

Per T400864.

Currently checking MFA of a user account requires to be a Phab admin.

Resolving this task depends on T393840: Update to Phorge upstream rPca176821 / Arcanist upstream rARCd2d2afd0 (2025-09-08) which will include https://we.phorge.it/rP39f3ac14673cafa0ef3d67b289b95903c2140a67 which would require another local patch on top to also allow members of acl*security_secteam.

Event Timeline

Aklapper changed the task status from Open to Stalled.
Aklapper triaged this task as Low priority.
Aklapper changed the subtype of this task from "Task" to "Feature Request".

Also note that after merging https://we.phorge.it/D26315 in upstream and resolving T404375: Update to Phorge upstream / Arcanist upstream to 2025-11-12 code,, Phab admins will be able to take a look at the member list of any project and see for each of those listed members if the member has MFA enabled.
That should make looking at https://phabricator.wikimedia.org/project/members/30/ more useful.

Aklapper claimed this task.

This issue should now be fixed on phabricator.wikimedia.org after today's software deployment in T404134.

This issue should now be fixed on phabricator.wikimedia.org after today's software deployment in T404134.

Judging by the task's description, wouldn't this require another local patch?

members of acl*security_secteam.

(I don't know which would be the best to use here, but FWIW acl*security_team is another ACL project that seems to represent the members of the Security-Team)

I'd first like to see both T410305 and https://we.phorge.it/T15947 tackled before looking further into this, thus unassigning myself for now.