Change #1194744 had a related patch set uploaded (by Daimona Eaytoy; author: Daimona Eaytoy):

[operations/mediawiki-config@master] Change CampaignEvents user rights for all small and medium wikis

https://gerrit.wikimedia.org/r/1194744

Change #1194935 had a related patch set uploaded (by Daimona Eaytoy; author: Daimona Eaytoy):

[operations/mediawiki-config@master] Delete the event-organizer user group on medium and small wikis

https://gerrit.wikimedia.org/r/1194935

Change #1194744 merged by jenkins-bot:

[operations/mediawiki-config@master] Assign CampaignEvents user rights to autoconfirmed in small and medium wikis

https://gerrit.wikimedia.org/r/1194744

Mentioned in SAL (#wikimedia-operations) [2025-10-09T13:36:33Z] <lucaswerkmeister-wmde@deploy2002> Started scap sync-world: Backport for [[gerrit:1194744|Assign CampaignEvents user rights to autoconfirmed in small and medium wikis (T401445)]]

Mentioned in SAL (#wikimedia-operations) [2025-10-09T13:41:06Z] <lucaswerkmeister-wmde@deploy2002> daimona, lucaswerkmeister-wmde: Backport for [[gerrit:1194744|Assign CampaignEvents user rights to autoconfirmed in small and medium wikis (T401445)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Mentioned in SAL (#wikimedia-operations) [2025-10-09T13:48:24Z] <lucaswerkmeister-wmde@deploy2002> Finished scap sync-world: Backport for [[gerrit:1194744|Assign CampaignEvents user rights to autoconfirmed in small and medium wikis (T401445)]] (duration: 11m 51s)

Mentioned in SAL (#wikimedia-operations) [2025-10-09T13:54:00Z] <lucaswerkmeister-wmde@deploy2002> mwscript-k8s job started: foreachwikiindblist small+medium emptyUserGroup --create-log '--log-reason=[[phabricator:T401445|T401445]]' event-organizer # T401445

Change #1194935 merged by jenkins-bot:

[operations/mediawiki-config@master] Delete the event-organizer user group on medium and small wikis

https://gerrit.wikimedia.org/r/1194935

Mentioned in SAL (#wikimedia-operations) [2025-10-09T13:55:32Z] <lucaswerkmeister-wmde@deploy2002> Started scap sync-world: Backport for [[gerrit:1194935|Delete the event-organizer user group on medium and small wikis (T401445)]]

Mentioned in SAL (#wikimedia-operations) [2025-10-09T13:56:34Z] <lucaswerkmeister-wmde@deploy2002> mwscript-k8s job started: foreachwikiindblist small emptyUserGroup --create-log '--log-reason=[[phabricator:T401445|T401445]]' event-organizer # T401445

Mentioned in SAL (#wikimedia-operations) [2025-10-09T14:00:01Z] <lucaswerkmeister-wmde@deploy2002> lucaswerkmeister-wmde, daimona: Backport for [[gerrit:1194935|Delete the event-organizer user group on medium and small wikis (T401445)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Mentioned in SAL (#wikimedia-operations) [2025-10-09T14:00:18Z] <lucaswerkmeister-wmde@deploy2002> mwscript-k8s job started: foreachwikiindblist medium emptyUserGroup --create-log '--log-reason=[[phabricator:T401445|T401445]]' event-organizer # T401445

Mentioned in SAL (#wikimedia-operations) [2025-10-09T14:02:19Z] <Lucas_WMDE> for the record, the foreachwikiindblist small+medium emptyUserGroup maintenance script run (for T401445) did *not* work, running the maintenance script separately for small and medium worked better

Mentioned in SAL (#wikimedia-operations) [2025-10-09T14:10:20Z] <lucaswerkmeister-wmde@deploy2002> Finished scap sync-world: Backport for [[gerrit:1194935|Delete the event-organizer user group on medium and small wikis (T401445)]] (duration: 14m 47s)

Maintenance script output: P83717, P83718

Just the wikis where something happened:

arywiki   ...done! Removed 1 users in total.
banwiki   ...done! Removed 1 users in total.
bdrwiki   ...done! Removed 1 users in total.
brwikimedia   ...done! Removed 4 users in total.
cbk_zamwiki   ...done! Removed 1 users in total.
dtpwiki   ...done! Removed 7 users in total.
ibawiki   ...done! Removed 3 users in total.
igwiki   ...done! Removed 38 users in total.
madwiki   ...done! Removed 1 users in total.
mswiktionary   ...done! Removed 15 users in total.
nywiki   ...done! Removed 1 users in total.
tumwiki   ...done! Removed 5 users in total.
uawikimedia   ...done! Removed 1 users in total.
arwikisource   ...done! Removed 1 users in total.
azbwiki   ...done! Removed 1 users in total.
azwiki   ...done! Removed 2 users in total.
kawiki   ...done! Removed 1 users in total.
lbwiki   ...done! Removed 1 users in total.
lvwiki   ...done! Removed 1 users in total.
minwiki   ...done! Removed 1 users in total.
mswiki   ...done! Removed 9 users in total.
newiki   ...done! Removed 1 users in total.
pawiki   ...done! Removed 1 users in total.
suwiki   ...done! Removed 1 users in total.
swwiki   ...done! Removed 9 users in total.
test2wiki   ...done! Removed 1 users in total.
testwiki   ...done! Removed 1 users in total.

For a total of 110 affected users (grep -h Removed T401445-small.log T401445-medium.log | awk '{total+=$4}END{print total}').

Okay, I just royally screwed up and I'm sorry about it. This was not meant to change user rights for invitation lists. While this is only mentioned in passing outside of the AC, it's actually a key point that implies the following:

• We need to create a separate user right for invitation lists, as it's currently reusing the "can organize events" right
• We need to configure WMF wikis to preserve the status quo (everyone who can organize events should get the new right)
• The "event organizer" group needs to remain, and all the users that I asked to be removed from it should be re-added to it

For the last point... I'll make a list of users involved to feed to createAndPromote, but it would be nice to be communicate this to the affected users/communities for transparency.

Change #1194981 had a related patch set uploaded (by Daimona Eaytoy; author: Daimona Eaytoy):

[operations/mediawiki-config@master] Revert "Delete the event-organizer user group on medium and small wikis"

https://gerrit.wikimedia.org/r/1194981

Change #1194983 had a related patch set uploaded (by Daimona Eaytoy; author: Daimona Eaytoy):

[mediawiki/extensions/CampaignEvents@master] Add separate user right for invitation lists

https://gerrit.wikimedia.org/r/1194983

Change #1194986 had a related patch set uploaded (by Daimona Eaytoy; author: Daimona Eaytoy):

[operations/mediawiki-config@master] Assign campaignevents-generate-invitation-lists right explicitly

https://gerrit.wikimedia.org/r/1194986

To fix the chaos and re-do this properly:

• Revert user group deletion in small/medium wiki (r1194981)
• Add event-organizer to users in P83722. Not sure if we can delete the previous log entry to leave a clean record.
• Land r1194986 to avoid unwanted changes to WMF config
• Review & merge r1194983 to introduce the new right
• Backport this change to wmf.22 (need full scap due to i18n)
• Announce what happened

Change #1194983 merged by jenkins-bot:

[mediawiki/extensions/CampaignEvents@master] Add separate user right for invitation lists

https://gerrit.wikimedia.org/r/1194983

Change #1195019 had a related patch set uploaded (by Daimona Eaytoy; author: Daimona Eaytoy):

[mediawiki/extensions/CampaignEvents@wmf/1.45.0-wmf.22] Add separate user right for invitation lists

https://gerrit.wikimedia.org/r/1195019

Change #1194981 merged by jenkins-bot:

[operations/mediawiki-config@master] Revert "Delete the event-organizer user group on medium and small wikis"

https://gerrit.wikimedia.org/r/1194981

Change #1194986 merged by jenkins-bot:

[operations/mediawiki-config@master] Assign campaignevents-generate-invitation-lists right explicitly

https://gerrit.wikimedia.org/r/1194986

Mentioned in SAL (#wikimedia-operations) [2025-10-09T20:06:31Z] <reedy@deploy2002> Started scap sync-world: Backport for [[gerrit:1194978|Update interwiki cache]], [[gerrit:1194981|Revert "Delete the event-organizer user group on medium and small wikis" (T401445)]], [[gerrit:1194986|Assign campaignevents-generate-invitation-lists right explicitly (T401445)]]

Mentioned in SAL (#wikimedia-operations) [2025-10-09T20:11:02Z] <reedy@deploy2002> daimona, reedy: Backport for [[gerrit:1194978|Update interwiki cache]], [[gerrit:1194981|Revert "Delete the event-organizer user group on medium and small wikis" (T401445)]], [[gerrit:1194986|Assign campaignevents-generate-invitation-lists right explicitly (T401445)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Mentioned in SAL (#wikimedia-operations) [2025-10-09T20:17:28Z] <reedy@deploy2002> Finished scap sync-world: Backport for [[gerrit:1194978|Update interwiki cache]], [[gerrit:1194981|Revert "Delete the event-organizer user group on medium and small wikis" (T401445)]], [[gerrit:1194986|Assign campaignevents-generate-invitation-lists right explicitly (T401445)]] (duration: 10m 46s)

Mentioned in SAL (#wikimedia-operations) [2025-10-09T20:46:56Z] <Daimona> Run createAndPromote as in P83722#336349 (~100x, in series) to restore event-organizer membership # T401445

Change #1195019 merged by jenkins-bot:

[mediawiki/extensions/CampaignEvents@wmf/1.45.0-wmf.22] Add separate user right for invitation lists

https://gerrit.wikimedia.org/r/1195019

The plan in T401445#11260950 has been completed, except for the deletion of log entries: there is no built-in way to do that with data integrity guarantees, and I didn't want the slightest chance of causing further breakage.

@Daimona Just FYI, based on https://test2.wikipedia.org/wiki/Special:UserRights/DarkGreenAndSunny, it looks like the maintenance script run may have granted permanent permissions even where the previous grant was only temporary. (I don't know if this would be an issue here or not, but thought it might be worth bringing to your attention just in case!)

(Also, just as a potential side-note of interest, erroneous log-entries have been deleted from Wikimedia production at least once before [I'm guessing by manual SQL commands] in T380878: Consider doing something about the "create/create" log entries on Wikidata and Commons. Admittedly the context for those log entries may be a bit different than here, though; as in that instance, it was a bug that MediaWiki had produced those log entries at all in the first place.)

In T401445#11264591, @A_smart_kitten wrote:

@Daimona Just FYI, based on https://test2.wikipedia.org/wiki/Special:UserRights/DarkGreenAndSunny, it looks like the maintenance script run may have granted permanent permissions even where the previous grant was only temporary. (I don't know if this would be an issue here or not, but thought it might be worth bringing to your attention just in case!)

Uh-oh... Thanks for pointing this out! I've extracted a superset of the affected users using the query in P83722#336475 and am now going to see what needs further tweaking.

Result of the analysis: those are all groups other than event-organizer, most commonly administrators, except for the following false positives:

• swwiki:Udehb-WMF - originally got temporary event-organizer but was made permanent immediately afterwards
• swwiki:Muddyb - originally had temporary event-organizer, was later changed to permanent

And the following true positives:

• swwiki:SideMontero had it until 2026-02-10 20:04
• swwiki:BrixL had it until 2026-09-08 13:05
• test2wiki:DarkGreenAndSunny as mentioned above. A test wiki though, so not an issue. I could change it using my local +sysop but there's no point.

@ifried @Udehb-WMF Hi, could you please reach out to the swwiki community to have expiries added back for the two users above? Thanks!

In T401445#11264700, @A_smart_kitten wrote:

(Also, just as a potential side-note of interest, erroneous log-entries have been deleted from Wikimedia production at least once before [I'm guessing by manual SQL commands] in T380878: Consider doing something about the "create/create" log entries on Wikidata and Commons. Admittedly the context for those log entries may be a bit different than here, though; as in that instance, it was a bug that MediaWiki had produced those log entries at all in the first place.)

Ah, interesting. I think in this case we're dealing with a much lower volume, so it's perhaps more acceptable; although I realize it's also true that user right entries tend to be more visible than some other random log type (like page creation). Other factors that make it somewhat risky are other parts of the code or tools somehow referencing these entries; and the fact that user right entries keep track of additions/removals in log_params, so if deleting, we'd want to make sure that there haven't been any new entries before yesterday's removal and now; doable, just maybe not worthwhile.

I have checked this with the confirmed user right on Fon, Egyptian Arabic, and Javanese and I am able to create events with this right. I also checked large language wikis where I am autoconfirmed, and I correctly do not have the right. Sending this to product sign off.