Page MenuHomePhabricator

Grant stewards access to CheckUser log via Meta
Closed, DeclinedPublic

Description

Would it be possible to make the checkuser-log also availeble for stewards on
meta? That way they dont have to give themselves CU on some project to be able
to check the log. Thanks.

Effeietsanders


Version: unspecified
Severity: enhancement

Details

Reference
bz8705

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 21 2014, 9:34 PM
bzimport set Reference to bz8705.
bzimport added a subscriber: Unknown Object (MLST).

Maybe it would even be better if the logs of the wiki's were seperated (so
nlwiki CU's can only see the log of nlwiki CU for instance) and a combined log
on meta? That way the logs on the wiki's itself wont be polluted with the lots
of checkusers on other wiki's either. (and it's not of their interest either i
guess)

Effeietsanders

robchur wrote:

The comments above contradict each other; you want a global log on Meta, but you
want to split the log up?

The current situation is that all CU logs are together. Every user with CU
access on any wiki can view the whole log of every wiki. I guess it would be
better to let the CU's on the specific projects only have access to the log that
shows only the CU-actions of that specific project. Not of the other projects.

The other part of the request is that stewards have through meta access to the
combined log of all CU-actions. (as it is now available on every single wiki).

If this is not directly possible, please give stewards at least access through
meta to the current CU-log. I hope this clarifies a bit.

robchur wrote:

(In reply to comment #3)

The current situation is that all CU logs are together. Every user with CU
access on any wiki can view the whole log of every wiki. I guess it would be
better to let the CU's on the specific projects only have access to the log that
shows only the CU-actions of that specific project. Not of the other projects.

Separate issue; file a separate request.

If this is not directly possible, please give stewards at least access through
meta to the current CU-log. I hope this clarifies a bit.

Should be doable; grant permission to use CheckUser to Stewards in the Meta site
configuration.

Request has been splitted. See bug 8710.

Why not just give them checkuser? Since the log can spill users IPs anyway,
especially with the search enabled.

I don't think that would be preferrable out of point of view of procedure. When stewards would
gain CU-access on meta, they would be the local CU's of meta, although they are not explicitely
appointed as such. It would be nicer to give the user-group "steward" access to the overall
checkuserlog.

All Stewards have access to checkuser on meta, and hence access to the global
CheckUser log. Marking as WORKSFORME, any separate request should be filed as a
separate bug.

REOPENED per Email discussion with Effeietsanders, which revealed that Stewards
aren't actually allowed to give themselves checkuser status on meta, as local
checkusers exist.

This is still silly, as the log can give away a lot anyway, one might as well
make them checkusers rather than play around with half-checkusers, that can get
IPs of people that were previously checked only.

Not every steward is CU at his/her home wiki. That might be for various reasons, the most common is probably that they dont want to have tons of checkusers in one wiki. That might make sense to make it possible to have some overview of what happens. Therefore it might make as well not very much sense to give every steward (by normal procedure ...) also CU access on meta. We cannot assign that ourselves, as we are not allowed per policy. Meta already has 16 checkusers, which is already much more then any other average wiki, especially of this size.
And well, it would be convenient for stewards to be able to see whether you perfomed the right checkuser to the right wiki afterwards, without needing to keep the userrights locally.