Suggested Investigations: UpdateCaseHandler REST API uses wrong right for access
Closed, ResolvedPublicBUG REPORT
Actions

Assigned To

Authored By

	Dreamy_Jazz
	Jul 30 2026, 7:02 PM

Project Tags

Referenced Files

None

Subscribers

Aklapper

Dreamy_Jazz

Description

Summary

The CheckUser-SuggestedInvestigations feature currently gates the use of the REST API on the checkuser right instead of checkuser-suggested-investigations. This is incorrect and should be fixed

Acceptance criteria

The API uses the correct right

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	SI: Use correct right for UpdateCaseHandler	Dreamy Jazz	mediawiki/extensions/CheckUser	master	+3 -3

Customize query in gerrit

Event Timeline

Dreamy_Jazz created this task.Jul 30 2026, 7:02 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 30 2026, 7:02 PM

Dreamy_Jazz claimed this task.Jul 30 2026, 7:02 PM

Dreamy_Jazz edited projects, added: Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)); removed: Product Safety and Integrity.

Dreamy_Jazz moved this task from Backlog to In progress on the Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)) board.

Change #1319541 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/CheckUser@master] SI: Use correct right for UpdateCaseHandler

https://gerrit.wikimedia.org/r/1319541

gerritbot added a project: Patch-For-Review.Jul 30 2026, 7:06 PM

Dreamy_Jazz moved this task from In progress to Needs review on the Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)) board.Jul 30 2026, 7:54 PM

Change #1319541 merged by jenkins-bot:

[mediawiki/extensions/CheckUser@master] SI: Use correct right for UpdateCaseHandler

https://gerrit.wikimedia.org/r/1319541

ReleaseTaggerBot added a project: MW-1.47-notes (1.47.0-wmf.14; 2026-08-04).Jul 31 2026, 9:00 AM

Maintenance_bot removed a project: Patch-For-Review.Jul 31 2026, 9:31 AM

Dreamy_Jazz moved this task from Needs review to QA in Prod on the Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)) board.Jul 31 2026, 10:25 AM

OKryva-WMF edited projects, added: Product Safety and Integrity (Sprint Sunflower (Aug 11 - Aug 28)); removed: Product Safety and Integrity (Sprint Clover (Jul 20 - Aug 7)).Tue, Aug 11, 1:55 PM

OKryva-WMF moved this task from Backlog to QA in Prod on the Product Safety and Integrity (Sprint Sunflower (Aug 11 - Aug 28)) board.Tue, Aug 11, 1:55 PM

Dreamy_Jazz closed this task as Resolved.Thu, Aug 27, 9:27 AM

Dreamy_Jazz moved this task from QA in Prod to Done on the Product Safety and Integrity (Sprint Sunflower (Aug 11 - Aug 28)) board.

Dreamy_Jazz updated the task description. (Show Details)

Suggested Investigations: UpdateCaseHandler REST API uses wrong right for accessClosed, ResolvedPublicBUG REPORTActions