Page MenuHomePhabricator

Restrict the new "applychangetags" on commons to sysop & bots
Closed, InvalidPublic

Description

This new MediaWiki feature has become available on all wikis, but it is unlikely that "normal users" using it. Pleas restrict the use on commons to sysop and bots.

I think that no local RFC is needed because this feature has been implanted without. I have prepared a JS hack to hide the the tools for all non sysops/bots, but js is bad for hiding such things, therefore i prefer a fix in the software directly.

Thanks in advice.
--Steinsplitter

Event Timeline

Steinsplitter raised the priority of this task from to Medium.
Steinsplitter updated the task description. (Show Details)
Steinsplitter added subscribers: Steinsplitter, Rillke, TTO.
Steinsplitter set Security to None.
Dereckson subscribed.

I beg to differ, this feature is especially useful on Wikimedia Commons, where there are several user gadgets performing actions through API: rename requests, PotY votes, visual batch editor, etc.

Please open a discussion on Wikimedia Commons on this issue.

When I've just offered to differ the change restricting this for every wiki I had the Commons example in thought for the especially interesting of this tagging feature.

I will disable it with JS if you refuse to to do it server side.

The feature was enabled without consensus, so i need to consensus to switch it off...

I beg to differ, this feature is especially useful on Wikimedia Commons, where there are several user gadgets performing actions through API: rename requests, PotY votes, visual batch editor, etc.

Those gadgets will most likely use API action=edit&tags=... which does not require the changetags right (it is governed by a separate right applychangetags).

Steinsplitter renamed this task from Restrict the new "changetags" on commons to sysop & bots to Restrict the new "applychangetags" on commons to sysop & bots.May 1 2015, 1:19 PM
In T97752#1251791, @TTO wrote:

I beg to differ, this feature is especially useful on Wikimedia Commons, where there are several user gadgets performing actions through API: rename requests, PotY votes, visual batch editor, etc.

Those gadgets will most likely use API action=edit&tags=... which does not require the changetags right (it is governed by a separate right applychangetags).

True :) I mean applychangetags.

.mw-log-editchangetags-button, .mw-history-editchangetags-button { display: none; }

in MediaWiki:Common.css would probably do the job.

I just wonder why a user would want to add/remove a tag? Is this the same as the tags that are automatically set through AbuseFilter? Is that at all desired? /confused

Disabling it in JS or CSS is useless, the server will still allow clients to do it. Clients can just block such resources or otherwise refuse to run them.

Krenair changed the task status from Resolved to Invalid.May 1 2015, 2:54 PM

That doesn't really change anything in terms of what users are able to do...

That doesn't really change anything in terms of what users are able to do...

One confusing button less: Obviously there were no user-configurable tags, so the button invoked a page where the user could do just nothing...