Page MenuHomePhabricator

"Logged" actions (e.g. upload, page move) by anonymous users are not logged
Closed, ResolvedPublic

Description

Author: charlottethewebb

Description:
I edited the config on my own wiki:

$wgGroupPermissions['*']['upload'] = true;

This allows anons to upload images, yes, but nothing appears in the log for the image or for the IP of the uploader.

Further testing revealed the same thing with page moves and any other action.

Obviously most sites would use user-rights settings more restrictive than the default (rather than less) and wouldn't be affected by this, but it might be worth fixing.


Version: unspecified
Severity: normal

Details

Reference
bz14735

Event Timeline

bzimport raised the priority of this task from to Low.Nov 21 2014, 10:09 PM
bzimport set Reference to bz14735.
bzimport added a subscriber: Unknown Object (MLST).

I could be completely wrong here, but I believe this will require a schema change. Same as with the revision table where both user id and user name are stored, I think the logging table will need a log_user_text column or somesuch to keep track of who did what, rather than solely by user id as we do now. Adding keyword too.

*** This bug has been marked as a duplicate of bug 3732 ***

tisane2718 wrote:

Bug 3732 has been fixed, but actions by anonymous users are still not logged.

Fixed in my recent logging refactoring. Should arrive in 1.19.