Page MenuHomePhabricator

$wgBlockDisablesLogin = true; for otrs_wikiwiki and chapcomwiki
Closed, ResolvedPublic

Description

Per (short) discussion on otrs-admin-l I ask to install/enable the Lockout extension on the OTRS wiki.

If done before the next big scap deployment of r61664 is needed.

BTW: This extension could be useful for all private WMF wikis.


Version: unspecified
Severity: enhancement
URL: http://www.mediawiki.org/wiki/Extension:Lockout

Details

Reference
bz22319

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:46 PM
bzimport set Reference to bz22319.

If we do that, we should do it on all private WMF wikis listed in bug 13177 (and subsequently mark bug 13177 as wontfix)

(In reply to comment #1)

If we do that, we should do it on all private WMF wikis listed in bug 13177
(and subsequently mark bug 13177 as wontfix)

I think the two are independent of another. Bug 13177 requires me to get password resetting for other users working properly again. I've got an outdated patch for it, but it still needs some work.

I'm inclined to say WONTFIX on this bug per http://www.mediawiki.org/wiki/Special:Code/MediaWiki/56415#c4568. It would be fairly trivial to integrate this extension into core, and I'm going to have a hack at it today.

bastique.bz wrote:

Poke? Hey Chad, what's the status of all this. I've gotten an online request from nl arbcom that they'd really like to prevent inactive users from seeing wiki pages.

Please add chapcom.wikimedia.org to this as well - would be good to finally be able to clean up a bit :)

(In reply to comment #3)

Poke? Hey Chad, what's the status of all this. I've gotten an online request
from nl arbcom that they'd really like to prevent inactive users from seeing
wiki pages.

The functionality exists and has been reviewed. I assume it will be deployed at the next general code update to the Wikimedia sites (within the next week, from what I understand from Tim). At that point, wikis wishing to enable this (likely only private wikis like the ones listed here) can get a shell user to change $wgBlockDisablesLogin to true, like any other site configuration change.

The change is now live, so it only needs to get $wgBlockDisablesLogin = true;

Should be worth to set this for all private wikis.

bastique.bz wrote:

Current settings for

'wgBlockDisablesLogin' => array(

'arbcom_nlwiki' => 'true', // # 22630

),

Make it:

'wgBlockDisablesLogin' => array(

'arbcom_nlwiki' => 'true', // # 22630
'chapcomwiki' => 'true', // # 22319
'otrs_wikiwiki' => 'true', // # 22319

),

Instead of blocking, couldn't you also create a usergroup for example, such as CurrentMembers and then only give that the view rights and let the admins move people in and out out of it.

This method would still be logged ([[Special:Log/rights]]) the same way as the block method would be ([[Special:Log/block]]), But this method would give a "You are not authorized" message (unless changed) compared to a "You are blocked method"

Overall there wouldn't be that much difference between the two.