Maniphest T76008

Nonexistent change in custom policy logged when mentioning a security task
Closed, DuplicatePublic
Actions

Assigned To

Authored By

	PleaseStand
	Nov 26 2014, 3:01 PM

Tags

Referenced Files

None

Subscribers

Description

When I added T75781#787853, the following appeared on T73167 (a task with the "Security" field set to "Security or Sensitive Bug"):

PleaseStand mentioned this in T75781: Cannot view Bugzilla migrated private/security tasks I am author/reporter of.Via Web · Wed, Nov 26, 12:19 PM
Restricted Application changed the visibility of this Task from "Custom Policy" to "Custom Policy". · View Herald TranscriptVia Herald · Wed, Nov 26, 12:19 PM
Restricted Application changed the edit policy of this Task from "Custom Policy" to "Custom Policy". · View Herald Transcript

The old and new custom policies are exactly the same. Same issue as T479?

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Duplicate		• mmodell	T76008 Nonexistent change in custom policy logged when mentioning a security task
		Resolved		• mmodell	T479 "changed Security from none to none." in initial task creation
		Resolved		• mmodell	T493 Prevent private information being leaked via Herald notifications
		Resolved		Qgil	T76401 Short term plan for security and private tasks
		Resolved		• chasemp	T78243 Phabricator upgrade on 2015-01-14
		Resolved		• chasemp	T77976 phabricator - don't run as root

Event Timeline

PleaseStand created this task.Nov 26 2014, 3:01 PM

PleaseStand raised the priority of this task from to Needs Triage.

PleaseStand updated the task description. (Show Details)

PleaseStand added a project: Phabricator.

PleaseStand changed Security from none to None.

PleaseStand subscribed.

Sounds like the same problem as T479, yes, just with different words.

• MZMcBride subscribed.Nov 26 2014, 6:49 PM

Qgil triaged this task as Low priority.Nov 27 2014, 7:32 AM

Qgil added a subtask: T479: "changed Security from none to none." in initial task creation.

Qgil mentioned this in T479: "changed Security from none to none." in initial task creation.Dec 3 2014, 9:51 AM

According to https://www.mediawiki.org/wiki/Phabricator/Security#Proposed_Updates_to_Process we are going to get rid of Herald for handling private tasks, and this might solve this problem as well.

Qgil added a subtask: T493: Prevent private information being leaked via Herald notifications.Dec 8 2014, 8:43 AM

Change 179405 had a related patch set uploaded (by Legoktm):
Huge refactor of security policy enforcer stuff.

https://gerrit.wikimedia.org/r/179405

Patch-For-Review

• mmodell claimed this task.Dec 12 2014, 6:40 AM

• mmodell raised the priority of this task from Low to High.Dec 12 2014, 6:43 AM

Qgil mentioned this in T85123: Create a continuous integration plan for Wikimedia Phabricator patches.Dec 22 2014, 8:22 AM

Qgil moved this task from To Triage to Doing on the Phabricator board.Dec 22 2014, 10:02 AM

This should be fixed by

https://gerrit.wikimedia.org/r/179405, still waiting for +2 and deployment.

• chasemp closed this task as a duplicate of T76564: The options of the Security dropdown in Phabricator need to be clear and documented.Jan 13 2015, 7:38 PM

• mmodell changed the status of subtask T493: Prevent private information being leaked via Herald notifications from Open to Stalled.Jan 18 2015, 10:31 AM

Nemo_bis reopened subtask T479: "changed Security from none to none." in initial task creation as Open.Feb 12 2015, 10:03 PM

scfc closed subtask T479: "changed Security from none to none." in initial task creation as Resolved.Feb 12 2015, 10:31 PM

scfc subscribed.Feb 12 2015, 10:48 PM

Nemo_bis reopened subtask T479: "changed Security from none to none." in initial task creation as Open.Feb 13 2015, 9:42 AM

matmarex closed subtask T479: "changed Security from none to none." in initial task creation as Resolved.Feb 13 2015, 2:13 PM

• mmodell mentioned this in Unknown Object (Diffusion Commit).Apr 8 2015, 4:33 PM

• mmodell mentioned this in rPHES120aab85a7f8: Huge refactor of security policy enforcer stuff..Apr 8 2015, 4:47 PM

• chasemp mentioned this in rPHEXe45d967b530e: Huge refactor of security policy enforcer stuff..Apr 9 2015, 5:24 PM

• mmodell closed subtask T493: Prevent private information being leaked via Herald notifications as Resolved.Jun 10 2015, 5:15 AM

Krenair reopened subtask T493: Prevent private information being leaked via Herald notifications as Open.Jun 11 2015, 1:59 AM

• mmodell closed subtask T493: Prevent private information being leaked via Herald notifications as Resolved.Jun 11 2015, 8:43 PM

• mmodell mentioned this in rPHEX4a2e564ca4ab: Huge refactor of security policy enforcer stuff..Apr 28 2016, 7:26 AM

• mmodell mentioned this in rPHEX16c8f8b6e48d: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEXe9540b04fbdc: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEX0291fb2cb991: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEX86794fb1e442: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEX8ecc40ad1462: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEX850cb3ab2ed3: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEXd7e26fcaaa2e: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEX085744f1516f: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEXbb318a220678: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEX3b337d73c4a7: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEXd7e62ca5f70b: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEX3f4da1e9c5d6: Huge refactor of security policy enforcer stuff..

Qgil mentioned this in rPHEX41a7224d9f67: Huge refactor of security policy enforcer stuff..Apr 28 2016, 7:26 AM

• mmodell mentioned this in rPHEX3ddefa34da1e: Huge refactor of security policy enforcer stuff..Apr 28 2016, 7:26 AM

• mmodell mentioned this in rPHEX3550419455ef: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEXdc82b33e93c5: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEXd29768828ea4: Huge refactor of security policy enforcer stuff..

Legoktm mentioned this in rPHEX6bf70ce211bc: Huge refactor of security policy enforcer stuff..Apr 28 2016, 7:26 AM

Legoktm mentioned this in rPHEXe160db6f54df: Huge refactor of security policy enforcer stuff..

• mmodell mentioned this in rPHEXcebd464500c6: Huge refactor of security policy enforcer stuff..Apr 28 2016, 7:26 AM

• mmodell mentioned this in rPHEX120aab85a7f8: Huge refactor of security policy enforcer stuff..Jul 11 2018, 11:58 PM