Page MenuHomePhabricator

Specific userright to bypass $wgAccountCreationThrottle
Open, LowestPublic

Description

Noratelimit allows to bypass $wgAccountCreationThrottle and is granted to account creators for this reason. It has the unfortunate side effect of removing rate limits related to moves (which may be even more problematic if we give a rate limited move-subpages userright to autoconfirmed users). So as has been done with tboverride in T24141, a userright allowing only to bypass $wgAccountCreationThrottle and nothing else should be created. I leave it to your discretion if noratelimit should still allow the bypass or not (in the later case, sysops should have the new userright too).

Event Timeline

Cenarium raised the priority of this task from to Medium.
Cenarium updated the task description. (Show Details)
Cenarium changed Security from none to None.
Cenarium subscribed.
Aklapper lowered the priority of this task from Medium to Lowest.Nov 27 2014, 2:09 AM
Aklapper subscribed.

This looks easy enough to implement, although once this is done another bug will need to be filed to modify the accountcreator group on enwiki to use it instead.

Change 179865 had a related patch set uploaded (by FunPika):
Add noratelimit-account user right.

https://gerrit.wikimedia.org/r/179865

Patch-For-Review

Change 179865 abandoned by FunPika:
Add noratelimit-account user right.

Reason:
I was focused on what the phab bug and the discussion on enwiki were asking for. If there are plans to merge $wgAccountCreationThrottle into $wgRateLimits (I wasn't aware of that until now), then probably better to wait for that to happen then configure the later appropriately.

https://gerrit.wikimedia.org/r/179865

There is currently an open bug (T50373) for merging $wgAccountCreationThrottle into $wgRateLimits. If this is done I assume it would be possible to modify the rate limits configuration to remove (or set to a level that account creators would be unlikely to hit) the limit for account creators.

Reopen - that other task does not accomplish the same ability. Notably, we have editors that need to create accounts in excess of the rate limit for events, etc - however they should not be exempt from all rate limiting (e.g. page moving). https://en.wikipedia.org/wiki/Wikipedia:Event_coordinator is an example of the use case.

Aklapper removed a project: Patch-For-Review.