A consensus [1] has been reached on enabling SecurePoll extensions on arbcom_zh to enable functions such as personnel appointment and dismissal voting.
[1]: https://w.wiki/JDZn
A consensus [1] has been reached on enabling SecurePoll extensions on arbcom_zh to enable functions such as personnel appointment and dismissal voting.
[1]: https://w.wiki/JDZn
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Stalled | ZhaoFJx | T419309 Enable SecurePoll extension on arbcom_zh | |||
| Resolved | Feature | Novem_Linguae | T301180 Allow local wikis to set up elections | ||
| Resolved | Novem_Linguae | T335201 Investigation: What needs to change to allow local wikis to run their own elections? | |||
| Resolved | • JWheeler-WMF | T209892 SecurePoll is not compatible with GPG 2.1+ | |||
| Resolved | Feature | SD0001 | T373950 SecurePoll's "active wiki" dropdown should be a config option and not active on all votes | ||
| Resolved | Feature | None | T377531 Ability to edit polls should be unbundled from securepoll-view-voter-pii / electionadmin | ||
| Resolved | Novem_Linguae | T384302 SecurePoll: Restrict creation of foreign and global elections |
Change #1248954 had a related patch set uploaded (by ZhaoFJx; author: ZhaoFJx):
[operations/mediawiki-config@master] arbcom_zhwiki: Add electionadmin group
I don't think we need the Namespace one, but I can amend the latter one into the patch.
Also I wonder if it is allowed for arbcom_zhwiki local bureaucrats (who are, unlike global stewards, not necessary NDA-signed) to grant a group that contains securepoll-view-voter-pii. TBH I doubt the need of this right, as account creation on the wiki is restricted and we are all trusted users.
I am still in doubt about the access to PII. When it comes to personal information, it is always better to grant less and grant whenever needed instead of granting too much and regretting afterwards. We may grant the access to PII to CheckUsers, which is not a locally grantable group, so sysadmins can still grant that role to local users if that's really needed.
Change #1265959 had a related patch set uploaded (by 1F616EMO; author: 1F616EMO):
[operations/mediawiki-config@master] arbcom_zhwiki: Enable SecurePoll without PII rights
The ArbCom shows slight tendency towards the no-PII patch. I will deploy that one in today's afternoon backport window.
I don't have time to deploy in April, and this is nor urgent anyway, so I will postpone the deployment to May as with reverting T420165.