Investigate on how many wikis users have local groups
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	mszwarc
	Feb 6 2026, 1:54 PM

Project Tags

Referenced Files

None

Subscribers

Aklapper

mszwarc

ZauberViolino

Description

For T414952: Prevent 2FA-required users from disabling their last 2FA method, we'll need to query all wikis to check if user can have 2FA disabled (from the perspective of that wiki). An initial idea is to list all wikis, where user has any groups and then make API calls to these wikis. Depending on the typical number of requests, this can be feasible or not.

Questions

What's the typical number of wikis, where UWERs have local groups?
Should we define some groups that we'll ignore for the purpose of including a wiki in the list of wikis to make the API call to?
- For example, should we skip wikis where user is only in autopatrol or similar low-level groups?

Related Objects
Search...

Status	Assigned	Task
		Restricted Task
Open	None	T150898 Force OATHAuth (2FA) for certain user groups in Wikimedia production and Beta wikis
Resolved	mszwarc	T414907 Enforce 2FA-requiring groups using $wgRestrictedGroups
Resolved	mszwarc	T414952 Prevent 2FA-required users from disabling their last 2FA method
Resolved	mszwarc	T416694 Investigate on how many wikis users have local groups

Event Timeline

mszwarc created this task.Feb 6 2026, 1:54 PM

mszwarc claimed this task.Feb 10 2026, 3:04 PM

mszwarc edited projects, added: Product Safety and Integrity (Sprint Flower (Feb 9 - Feb 27)); removed: Product Safety and Integrity.

mszwarc moved this task from Backlog to Ready on the Product Safety and Integrity (Sprint Flower (Feb 9 - Feb 27)) board.

(Off topic) Good task because I have this (meta:User:魔琴/MarkRights/code/global) and I really need local groups data :)

I've went through the data. If we count wikis, where a user has any groups, there will be some users with groups on 100+ wikis:

P88786 Number of wikis where users have rights

1	1015 wikis: 1 users
2	839 wikis: 1 users
3	817 wikis: 1 users
4	217 wikis: 1 users
5	211 wikis: 1 users
6	205 wikis: 1 users
7	196 wikis: 1 users
8	189 wikis: 1 users
9	183 wikis: 1 users
10	179 wikis: 1 users
11	178 wikis: 1 users
12	174 wikis: 1 users
13	160 wikis: 1 users
14	153 wikis: 1 users
15	141 wikis: 1 users
16	131 wikis: 1 users
17	129 wikis: 1 users
18	128 wikis: 1 users
19	125 wikis: 2 users
20	124 wikis: 1 users
21	120 wikis: 1 users
22	119 wikis: 1 users
23	112 wikis: 1 users
24	111 wikis: 1 users
25	110 wikis: 1 users
26	109 wikis: 2 users
27	105 wikis: 1 users
28	96 wikis: 1 users
29	95 wikis: 1 users
30	92 wikis: 1 users
31	90 wikis: 1 users
32	88 wikis: 2 users
33	76 wikis: 1 users
34	75 wikis: 1 users
35	70 wikis: 2 users
36	69 wikis: 1 users
37	67 wikis: 1 users
38	65 wikis: 2 users
39	63 wikis: 2 users
40	62 wikis: 1 users
41	61 wikis: 1 users
42	60 wikis: 1 users
43	59 wikis: 3 users
44	56 wikis: 1 users
45	55 wikis: 2 users
46	53 wikis: 3 users
47	52 wikis: 2 users
48	49 wikis: 1 users
49	48 wikis: 2 users
50	47 wikis: 3 users
51	46 wikis: 2 users
52	45 wikis: 1 users
53	44 wikis: 5 users
54	43 wikis: 2 users
55	40 wikis: 3 users
56	39 wikis: 1 users
57	38 wikis: 2 users
58	37 wikis: 3 users
59	36 wikis: 2 users
60	35 wikis: 3 users
61	34 wikis: 5 users
62	33 wikis: 5 users
63	32 wikis: 3 users
64	31 wikis: 2 users
65	30 wikis: 3 users
66	29 wikis: 4 users
67	28 wikis: 2 users
68	27 wikis: 10 users
69	26 wikis: 12 users
70	25 wikis: 7 users
71	24 wikis: 5 users
72	23 wikis: 12 users
73	22 wikis: 8 users
74	21 wikis: 9 users
75	20 wikis: 13 users
76	19 wikis: 9 users
77	18 wikis: 14 users
78	17 wikis: 23 users
79	16 wikis: 20 users
80	15 wikis: 33 users
81	14 wikis: 40 users
82	13 wikis: 48 users
83	12 wikis: 64 users
84	11 wikis: 83 users
85	10 wikis: 123 users
86	9 wikis: 177 users
87	8 wikis: 221 users
88	7 wikis: 339 users
89	6 wikis: 587 users
90	5 wikis: 977 users
91	4 wikis: 1791 users
92	3 wikis: 3914 users
93	2 wikis: 14040 users
94	1 wikis: 236755 users

However, many of the groups are non-sensitive ones, such as extendedconfirmed or uploader. Therefore, I've run another check, this time counting only wikis where user has at least one non-excluded groups.

The excluded groups were: extendedconfirmed, uploader, autoreview, editor, autopatrolled, bot, rollbacker, ipblock-exempt, patroller, filemover, translationadmin, confirmed, event-organizer, accountcreator. I chose them based on their high or moderate frequency and low sensitivity, as well as the likeliness to reduce the wiki counts in the resulting data.

P88787 Number of wikis where users have certain non-excluded rights

1	14 wikis: 1 users
2	13 wikis: 3 users
3	12 wikis: 2 users
4	11 wikis: 2 users
5	10 wikis: 5 users
6	9 wikis: 10 users
7	8 wikis: 10 users
8	7 wikis: 32 users
9	6 wikis: 29 users
10	5 wikis: 73 users
11	4 wikis: 120 users
12	3 wikis: 322 users
13	2 wikis: 1243 users
14	1 wikis: 17685 users

Restricting the set of user groups of interest by excluding certain well-known groups reduces the number of wikis to manageable amounts. Invoking an API call to a few wikis shouldn't impose significant performance issues on the 2FA enforcement check. (At least, the performance shouldn't suffer as much as GlobalContributions)

The counts do include most of the system accounts (which typically have bot or other rights, so they don't appear in the second listing), but AbuseFilter was removed from the analysis, due to using many names, so being counted multiple times otherwise.

mszwarc closed this task as Resolved.Feb 11 2026, 10:08 PM

mszwarc moved this task from Ready to Done on the Product Safety and Integrity (Sprint Flower (Feb 9 - Feb 27)) board.

Investigate on how many wikis users have local groupsClosed, ResolvedPublicActions

Description

Questions

Related ObjectsSearch...

Event Timeline

Investigate on how many wikis users have local groups
Closed, ResolvedPublic
Actions

Related Objects
Search...