I'm working with Trust and Safety Product Team
User Details
- User Since
- Jun 12 2018, 2:22 PM (332 w, 4 d)
- Availability
- Available
- IRC Nick
- kostajh
- LDAP User
- Unknown
- MediaWiki User
- KHarlan (WMF) [ Global Accounts ]
Tue, Oct 22
My suspicion, though, is that there's not going to be much to update. Temporary accounts will look like regular user accounts in terms of public facing data in the replicas. Private data for those accounts will be in CheckUser tables that are not visible on the replicas.
Also noting that temporary accounts are already live on testwiki and test2wiki (since July), so you should be able to check for any concerning issues based on temporary account creations that happened on those wikis already.
@fnegri is there a list of views/filters with a description of their purpose, that we could review?
Unassigned myself in case someone else wants to take this one this week.
Mon, Oct 21
One part of this task is not yet done (seeing usernames next to pages) but the rest can start in QA.
This has been known for a while but we didn't really care. With the central session being more crucial for temp users, maybe we should. We could change the final step of central autologin to be two top-level redirects instead of one subresource request - that would make login and signup slower by a few hundred milliseconds, but it would also make the central session more reliable.
Fri, Oct 18
Tagging with FY2024-25 WE4.2 as it's a hypothesis for Q2 work.
Pages should be listed without explicitly linking them to an IP address or temporary account.
Thu, Oct 17
Wed, Oct 16
The impact of change in build times is visible here https://grafana.wikimedia.org/goto/36K_ctiHR?orgId=1
Now that the patches are merged, I see that https://dumps.wikimedia.org/other/globalblocks/ is still present (not expected) and that the last run was on October 5 (expected). I think we can mark this task as resolved once https://dumps.wikimedia.org/other/globalblocks/ is no longer online.
I updated the patch to exclude Math as well. We checked ~20 repositories, so I think there are not too many more repositories with issues.
Tue, Oct 15
We now have a different issue. The jobs seem to end with "Recording job details...", see https://logstash.wikimedia.org/goto/e0751daab837922c109a1c801c084ec3
Nevermind, the core patch linked with the GrowthExperiments one is wrong https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1077357/16/autoload.php (h/t @Reedy)
The problem is that we assume that user_name will be set, but for account creations (and autocreations), AbuseFilter sets a value for accountname instead. I'll make a patch to update AbuseFilterExamine.php and SpecialAbuseLog.php to fallback to accountname if user_name is not set.
Moving back to in progress, to add a dashboard panel once we have data.
Moving to "In progress" to add the panel once we have collected some data.
We need some more time to finalize the access policy and proposed changes.
As far as I can tell, the only potential concern is in the pagequality permission, which allows for interacting with the tool. That is granted to the user group by default in GroupPermissions in extension.json. For all wikis except dewikisource, this remains as user. For dewikisource, the value is * meaning that temporary accounts would be able to interact with the tool.
Soft depends on T376132: Set known flag for temporary accounts config on metawiki.