Page MenuHomePhabricator

Add reason and private log to view private abuse log information
Closed, DeclinedPublic

Description

Right now anyone with the abusefilter-private can view private information just by clicking the details button on any log entry, and it will show ip address of who triggered the filter, without needing to put a reason and without any logs of who viewed the ip address, unlike CheckUser. Since ip address information is private and shouldn't be viewed without a reason, I request that a reason field is made before a user sees the ip addresses, and also a private log (like CkeckUser) that shows which user saw that private information.


Version: unspecified
Severity: enhancement

Details

Reference
bz17219

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 21 2014, 10:24 PM
bzimport added a project: AbuseFilter.
bzimport set Reference to bz17219.

I am inclined to say that if you don't want unlogged access to IP addresses, you should just not give out this right. Adding an entire accountability system around the viewing of IP addresses and so on seems like a waste of manpower, and needlessly complicated.

This will make checkuser useless in some situations.

mike.lifeguard+bugs wrote:

(In reply to comment #2)

This will make checkuser useless in some situations.

No it will not. Please, no misinformation.

'abusefilter-private' is disabled on all WMF projects.