Change Details

==== Motivation There could be scenarios where we want to withdraw IP address reveal permissions from a user in a situation where the user has caused enough of a trust & safety concern to have them not view IPs but not severe enough to block them from the project. Another use case is for situations where a user does not want to have this access for personal safety concerns/external pressures. This permission should work globally - so a user can be blocked from revealing IP addresses from all wikis. This should also work irrespective of whether the user has opted-in to IP reveal ability.

==== Motivation There could be situations where a user does not want to have this access to Temporary accounts IPs for personal safety concerns. In the current implementation of temporary accounts, [certain user groups](https://foundation.wikimedia.org/wiki/Policy:Wikimedia_Access_to_Temporary_Account_IP_Addresses_Policy) have access by default without needing to request it. We want to build a way out for these users who don't want to give up their user rights/groups but do not need IP address access. Note that this task is in response to a need expressed by some community members privately to the TSP team. We will solve for this by letting users who want to give up this access to reach out to stewards or staff privately who will be able to update a central, private list that takes away the user's right across all projects. ==== Acceptance criteria [] A central meta page exists for listing users who should be exempt from viewing temporary account IPs [] Meta page link TBD [] The page and its editing history is accessible to and editable by `staff` and stewards only [] The list can be edited through community configuration: username and an optional reason field [] Users who are on the list will not be able to access temporary account IP addresses across all projects -- irrespective of whether or not they had access prior to being added to the list [] #checkuser-userinfocard and other relevant places reflect that the user does not have access accurately [] If a user is taken off the list, they can regain access the same way as they could previously.

==== Motivation There could be scenarios where we want to withdraw IP address reveal permissions from a user in a situation where the user has caused enough of a trust & safety concern to have them not view IPs but not severe enough to block them from the projectituations where a user does not want to have this access to Temporary accounts IPs for personal safety concerns. In the current implementation of temporary accounts, [certain user groups](https://foundation.wikimedia.org/wiki/Policy:Wikimedia_Access_to_Temporary_Account_IP_Addresses_Policy) have access by default without needing to request it. We want to build a way out for these users who don't want to give up their user rights/groups but do not need IP address access. Another use case is for situations where a user does not want to have this access for personal safety concerns/external pressures. This permission should work globally - so a user can be blocked from revealing IP addresses from all wikis.Note that this task is in response to a need expressed by some community members privately to the TSP team. We will solve for this by letting users who want to give up this access to reach out to stewards or staff privately who will be able to update a central, private list that takes away the user's right across all projects. ==== Acceptance criteria [] A central meta page exists for listing users who should be exempt from viewing temporary account IPs [] Meta page link TBD This should also work irrespective of whether the user has opted-in to IP reveal ability.[] The page and its editing history is accessible to and editable by `staff` and stewards only [] The list can be edited through community configuration: username and an optional reason field [] Users who are on the list will not be able to access temporary account IP addresses across all projects -- irrespective of whether or not they had access prior to being added to the list [] #checkuser-userinfocard and other relevant places reflect that the user does not have access accurately [] If a user is taken off the list, they can regain access the same way as they could previously.