Tchanders added a subscriber: TAdeleye_WMF. Tchanders added a comment.
Thanks for the question @Michael - we are drafting a follow-up communication to send round about this, which should hopefully add a load of clarification. I'll try to provide some answers in the meantime below. > @Tchanders: It is still unclear to me what the general plan is for moving forward with them. Or where the overall effort for this is being coordinated. I really would appreciate some pointers here if you can provide them 🙏. > [...] > I see T349219 <https://phabricator.wikimedia.org/T349219>: [M] Investigate: Which workflows create an IP actor?, but is this for doing due diligence that no workflow is being overlooked, or is that for creating a list to actually do the work? The work will be co-ordinated via this task: T349129: Workflows that create an IP (anon) actor should create a temporary user actor instead <https://phabricator.wikimedia.org/T349129>. We're expecting to add some more subtasks as a result of T349219: [M] Investigate: Which workflows create an IP actor? <https://phabricator.wikimedia.org/T349219>, which will be our attempt to find affected cases. But we don't expect to find them all, so we'll also ask other teams to check their features and file tasks there too. In terms of co-ordinating timing and roadmaps between teams, this is something that @TAdeleye_WMF has been working on. > I saw T340540#9201679 <https://phabricator.wikimedia.org/T340540#9201679> which seems looks like we need to touch every current and future editing-related endpoint for this. I also saw T336187 <https://phabricator.wikimedia.org/T336187>: [S] Investigate: Creating temp user on non-EditPage actions, but I'm unsure what specifically follows from that. Each endpoint will need updating separately. (I think this is the logical conclusion of how MW is architected, by calling out to individual handlers that do everything - e.g. permissions checks, rate limits, logging, etc - distally.) We will provide clear steps for what to do, which modules and traits can be included, etc. We'll add it to the documentation page (more on that below) and add it to the communication. > If we miss an endpoint, is there some safety-mechanism planned/implemented that ensures that requests fail that would create a ip-edit/change without also creating a temporary account? The safety mechanism goes the other way - it will throw an error on attempting to create an IP actor, so the action won't complete until the pathway is fixed: T345578: Ensure that an IP address cannot be saved permanently if IP Masking is enabled <https://phabricator.wikimedia.org/T345578>. This will likely be a way of finding missed cases, but at first we'll monitor for this log entry when IP actors are created: T349891: [S] Add some kind of logging when an actor is created with an IP address <https://phabricator.wikimedia.org/T349891>, to try to stay ahead. > The task T325592 <https://phabricator.wikimedia.org/T325592>: Start a technical documentation page for IP Masking sounds like it might help, but it has not seen any movement since it was created roughly a year ago. Our technical documentation lives here: https://www.mediawiki.org/wiki/Help:Temporary_accounts/How_it_works - it looks like that task wasn't updated when we added that. TASK DETAIL https://phabricator.wikimedia.org/T326908 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Tchanders Cc: TAdeleye_WMF, Michael, WMDE-Fisch, WMDE-leszek, ItamarWMDE, Niharika, ARamirez_WMF, SCherukuwada, Aklapper, Tchanders, Danny_Benjafield_WMDE, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, Akuckartz, Nandana, kostajh, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, JJMC89, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, Mbch331, Ltrlg
_______________________________________________ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
