Thank you for your bug report.

Could you confirm the following steps to reproduce the bug on a test MediaWiki + AbuseFilter install are the right ones?

1. login with an unprivileged account
2. create a new filter
3. mark it public
4. logout and login with an unprivileged account
5. try to search his log entries
6. get it
7. logout and login with a privileged account
8. mark it private
9. logout and login with an unprivileged account
10. try to search his log entries
11. instead an error message, we'll get all the results of all the public filters

Please also reopen bug #25898 to discuss the "unfixing" issue, this discussion doesn't belong here.

Adding "see also" bug URLs.

Hi Dereckson,

I can't reopen bugs because I currently lack the required permissions here on Wikimedia Bugzilla.

Here are some sample steps to reproduce this bug.

1. Use an unprivileged account.
2. Go to https://en.wikipedia.org/wiki/Special:AbuseFilter to see a list of active public and private filters. Note which filters are public and which are private.
3. Go to https://en.wikipedia.org/wiki/Special:AbuseLog
4. In the "Filter ID" field, type the number of a private filter.
5. You now see a list of all logged entries from public filters, which is not the desired behavior.

Note that if you instead do the following:

1. Use an unprivileged account
2. Go to https://en.wikipedia.org/wiki/Special:AbuseFilter to see a list of active public and private filters. Note which filters are public and which are private.
3. Click on the name or number of a private filter, such as by clicking "Prodego's test filter".
4. You get an error message as should be expected.

Does this help?

So, in short: When filtering to a private filter in Special:AbuseLog, all public logs are shown instead of getting an error.

Thehelpfulonewiki wrote:

Confirming bug. I know this exists, basically a private abuse filter will have private logs but looking at the log view of the filter will show you the public log entries instead of saying you don't have permission to view the logs of the private filter. Previous bug to implement private filter logs was https://bugzilla.wikimedia.org/show_bug.cgi?id=33380.

Bug #25898 reopened, per description, comment #1 and comment #2.

Closed again, cf. bug 25898 comment 3.

Gerrit change 11826

Change abandoned: I've thought through this a lot more and it seems that someone should try to make sure that filtering by a private AbuseFilter work properly instead of just erroring like I suggested there.