Page MenuHomePhabricator
Create Task
Maniphest T411381

Security Issue Access Request for Novem Linguae
Closed, ResolvedPublic
Actions

Description

Phabricator Username: Novem_Linguae

Reasons For Request: I am a volunteer software developer with mediawiki+2. I've written hundreds of merged patches across multiple MediaWiki repos. I am a generalist, but have also specialized a bit in PageTriage (148 patches), SecurePoll (50 patches), and FlaggedRevs (38 patches).

Would be a nice efficiency if I didn't have to ask people to add me to security tickets or people didn't have to remember to add me to security tickets, especially for PageTriage, SecurePoll, FlaggedRevs, and any extensions I might specialize in in the future. Examples of people adding me:

According to https://phabricator.wikimedia.org/maniphest/query/Rkd677wiUW4J/#R, I am subscribed to 61 tickets tagged "Security".

I previously signed the Volunteer NDA when I received Logstash access, and I am using Phabricator 2FA.

Thank you very much for your consideration.

Related Objects

Event Timeline

Novem_Linguae created this task.Dec 1 2025, 4:59 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 1 2025, 4:59 PM
sbassett added subscribers: EMill-WMF, sbassett.Dec 1 2025, 5:12 PM

Ping @EMill-WMF for review.

Aklapper awarded a token.Dec 1 2025, 7:34 PM
MusikAnimal awarded a token.Dec 1 2025, 9:32 PM
Urbanecm subscribed.Dec 2 2025, 10:54 AM

I believe this request should be granted. As documented by the list @Novem_Linguae created in the description, they are routinely helping with security tickets in components that are neglected by other developers, such as SecurePoll or Flaggedrevs. Novem Linguae is already a +2 holder (granted in T364531), which indicates a great amount of trust, and as far as I can see, they exercise their judgement with care.

sbassett changed the task status from Open to Stalled.Dec 2 2025, 3:42 PM
sbassett triaged this task as Low priority.
sbassett moved this task from Incoming to Back Orders on the Security-Team board.
sbassett added a project: SecTeam-Processed.

Currently stalled on efforts to better define and formalize Wikimedia's Phab access policies for volunteers and community members.

Bawolff awarded a token.Dec 3 2025, 4:58 PM
A_smart_kitten subscribed.Dec 4 2025, 6:24 PM
Novem_Linguae added a comment.Dec 9 2025, 9:30 AM

Hello friends. Thanks for your consideration. Any updates/ETA?

sbassett added a comment.Dec 9 2025, 3:55 PM
In T411381#11443062, @Novem_Linguae wrote:

Hello friends. Thanks for your consideration. Any updates/ETA?

Unfortunately not at this time. A new access policy is being worked upon but I would not expect that to be ready until the new year.

Novem_Linguae added a comment.Dec 9 2025, 4:04 PM

Thanks for the update. Will check back in next month. Happy holidays :)

ZhaoFJx awarded a token.Dec 13 2025, 12:31 AM
ZhaoFJx subscribed.
Novem_Linguae added a comment.Jan 6 2026, 2:55 PM

Hello friends. Happy new year. I hope you enjoyed some time off. Was wondering if there were any updates/ETA on this one?

Zabe awarded a token.Jan 6 2026, 3:00 PM
sbassett added a comment.Jan 6 2026, 3:47 PM
In T411381#11496224, @Novem_Linguae wrote:

Hello friends. Happy new year. I hope you enjoyed some time off. Was wondering if there were any updates/ETA on this one?

We have an internal meeting to discuss this, this Friday, 2026-01-09.

Novem_Linguae added a comment.Jan 6 2026, 3:52 PM

Sounds great. Thank you for the update.

EMill-WMF added a comment.Jan 9 2026, 4:04 PM

@Novem_Linguae Thanks for your patience. Your request is approved.

The next step before turning on access will be the NDA - we'll be in touch off-thread with you about that.

DreamRimmer subscribed.Jan 17 2026, 2:53 PM
KFrancis subscribed.Thu, Feb 19, 12:28 AM

Hello all, the updated NDA has been sent out for signatures. I'll confirm when it's complete. Thanks!

sbassett added a comment.Thu, Feb 19, 3:45 PM
In T411381#11630372, @KFrancis wrote:

Hello all, the updated NDA has been sent out for signatures. I'll confirm when it's complete. Thanks!

Thank you, @KFrancis! Once it has been signed and accepted by Legal, can you let me know, and I will officially grant Phabricator security access to @Novem_Linguae?

Novem_Linguae added a comment.Mon, Feb 23, 6:18 PM

Quick update: I signed the NDA on Feb 18. I think we're just awaiting a counter-signature from someone in legal.

KFrancis added a comment.Mon, Feb 23, 8:31 PM

Hi all, the NDA is complete. Thanks!

sbassett closed this task as Resolved.Mon, Feb 23, 8:43 PM
sbassett claimed this task.
sbassett moved this task from Back Orders to Our Part Is Done on the Security-Team board.

Thanks, @KFrancis. I've added @Novem_Linguae to the acl_security_volunteer access list. Thanks for your patience!

Novem_Linguae added a comment.Mon, Feb 23, 8:56 PM

Thank you all as well. I appreciate your time :)

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits