Page MenuHomePhabricator

Enable SecurePoll extension on arbcom_zh
Open, Stalled, LowPublic

Description

A consensus [1] has been reached on enabling SecurePoll extensions on arbcom_zh to enable functions such as personnel appointment and dismissal voting.

[1]: https://w.wiki/JDZn

Event Timeline

ZhaoFJx changed the task status from Open to In Progress.Mar 7 2026, 12:56 AM
ZhaoFJx moved this task from Backlog to Working on on the Wikimedia-Site-requests board.
ZhaoFJx moved this task from Backlog to Research on the Chinese-Sites board.
ZhaoFJx moved this task from Research to Site configuration on the Chinese-Sites board.

Change #1248954 had a related patch set uploaded (by ZhaoFJx; author: ZhaoFJx):

[operations/mediawiki-config@master] arbcom_zhwiki: Add electionadmin group

https://gerrit.wikimedia.org/r/1248954

Are we missing wgSecurePollUseMediaWikiNamespace and wgSecurePollUseLogging here?

May need SQL tables as T396483 mentioned, could DBA have a quick look?

Are we missing wgSecurePollUseMediaWikiNamespace and wgSecurePollUseLogging here?

I don't think we need the Namespace one, but I can amend the latter one into the patch.

Also I wonder if it is allowed for arbcom_zhwiki local bureaucrats (who are, unlike global stewards, not necessary NDA-signed) to grant a group that contains securepoll-view-voter-pii. TBH I doubt the need of this right, as account creation on the wiki is restricted and we are all trusted users.

I will handle the backport once the patch is ready.

Thanks! I have updated the patch as you suggested.

I am still in doubt about the access to PII. When it comes to personal information, it is always better to grant less and grant whenever needed instead of granting too much and regretting afterwards. We may grant the access to PII to CheckUsers, which is not a locally grantable group, so sysadmins can still grant that role to local users if that's really needed.

Change #1265959 had a related patch set uploaded (by 1F616EMO; author: 1F616EMO):

[operations/mediawiki-config@master] arbcom_zhwiki: Enable SecurePoll without PII rights

https://gerrit.wikimedia.org/r/1265959

The ArbCom shows slight tendency towards the no-PII patch. I will deploy that one in today's afternoon backport window.

1F616EMO changed the task status from In Progress to Stalled.Thu, Apr 2, 8:47 PM
1F616EMO triaged this task as Low priority.

I don't have time to deploy in April, and this is nor urgent anyway, so I will postpone the deployment to May as with reverting T420165.