cleanup - depopuplate global oathauth-tester group
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Xaosflux
	Dec 1 2025, 12:08 PM

Description

Once we are at 100%, the global group oathauth-tester should be able to be depopulated.

Currently has >1500 members

Blocked on T399664

This should have a hold delay (2 weeks maybe) to ensure there are no regression issues requiring the 100% rollback

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Drop oathauth-tester messages	mediawiki/extensions/WikimediaMessages	master	+0 -6

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	Mstyles	T411737 Remove oathauth-tester messages
Resolved	Urbanecm	T411360 cleanup - depopuplate global oathauth-tester group
Resolved	Mstyles	T399664 Expand 2FA Opt-In Privileges
Resolved	Mstyles	T400579 Add ability to make 2FA available to N% of users
Resolved	Reedy	T411395 Create a MediaWiki maintenance script to mass remove users from a given global user group

Event Timeline

Xaosflux created this task.Dec 1 2025, 12:08 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 1 2025, 12:08 PM

Xaosflux updated the task description. (Show Details)Dec 1 2025, 12:10 PM

Mstyles updated the task description. (Show Details)Dec 1 2025, 5:31 PM

Reedy removed a parent task: T399664: Expand 2FA Opt-In Privileges.Dec 1 2025, 5:35 PM

Reedy added a subtask: T399664: Expand 2FA Opt-In Privileges.

Reedy mentioned this in T411395: Create a MediaWiki maintenance script to mass remove users from a given global user group.Dec 1 2025, 5:38 PM

Reedy moved this task from Backlog to External on the MediaWiki-extensions-OATHAuth board.Dec 1 2025, 6:25 PM

Xaosflux updated the task description. (Show Details)Dec 3 2025, 11:07 AM

Reedy added a parent task: T411737: Remove oathauth-tester messages.Dec 4 2025, 12:01 AM

Mstyles closed subtask T399664: Expand 2FA Opt-In Privileges as Resolved.Dec 4 2025, 9:27 PM

Johannnes89 subscribed.Dec 5 2025, 8:15 PM

Mstyles assigned this task to Urbanecm_WMF.Dec 5 2025, 9:09 PM

Mstyles mentioned this in T411737: Remove oathauth-tester messages.

Earlier this week I asked @Urbanecm to handle this, since deleting this group will require updating community process documentation and communication with the stewards and other users who often assign global group membership.

It looks like this will be more annoying to do than I thought, because the global group management UI doesn't allow a group to be deleted until all of its members have been removed from it, and this group has 1662 members. @Urbanecm assuming you and/or the stewards don't want to manually remove everyone from the group, we should talk about automating this. There is a script that allows you to batch-remove users from a global group, with the log entry attributed to the Maintenance script system user. I think it might be best to use that to depopulate the group, then have a steward actually delete the group.

Restricted Application added a project: User-Urbanecm. · View Herald TranscriptDec 5 2025, 9:19 PM

Note, we do want a delay on this to ensure there isn't a regression found in the 100% rollout

taavi subscribed.Dec 5 2025, 10:03 PM

Hi all, thanks @Catrope for the ping. I'll take care of it (with a small delay)

A_smart_kitten subscribed.Dec 8 2025, 3:40 PM

Mstyles subscribed.Dec 9 2025, 10:16 PM

@Urbanecm following up on this task in the new year

Reedy updated the task description. (Show Details)Jan 5 2026, 6:16 PM

Reedy added a subtask: T411395: Create a MediaWiki maintenance script to mass remove users from a given global user group.

Mentioned in SAL (#wikimedia-operations) [2026-01-12T10:57:33Z] <urbanecm@deploy2002> mwscript-k8s job started: CentralAuth:emptyGlobalUserGroup.php --wiki=metawiki oathauth-tester # T411360

I emptied the global group and put the backup for it here:

[urbanecm@stat1008 ~/Documents/onetime]$ echo "select * from global_user_groups where gug_group='oathauth-tester'" | analytics-mysql centralauth > oathauth_tester_membership_20260112.txt
[urbanecm@stat1008 ~/Documents/onetime]$ wc -l oathauth_tester_membership_20260112.txt 
1661 oathauth_tester_membership_20260112.txt
[urbanecm@stat1008 ~/Documents/onetime]$

Now I can delete the group on wiki:

11:58, 12 January 2026 Martin Urbanec changed global group permissions for Special:GlobalUsers/oathauth-tester: added (none); removed oathauth-enable (group no longer needed, let's unassign the permission)