Last modified: 2013-08-19 14:21:33 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T54892, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 52892 - en-Wiki Edit filter log only partially searchable by filter ID
en-Wiki Edit filter log only partially searchable by filter ID
Status: VERIFIED INVALID
Product: MediaWiki extensions
Classification: Unclassified
AbuseFilter (Other open bugs)
master
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-08-15 18:59 UTC by Alex Matulich
Modified: 2013-08-19 14:21 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Alex Matulich 2013-08-15 18:59:09 UTC
Regarding the list output at http://en.wikipedia.org/wiki/Special:AbuseLog?wpSearchUser=&wpSearchFilter=575&wpSearchTitle=

This should search the log for filter ID 575. This is useful to aid confirmed editors in identifying behavior patterns of a particularly prolific PR firm that has created hundreds of sockpuppets.

Indeed it works as it should -- but only for admins. For everyone else, the URL above results in a list that includes all filter IDs, not just 575.

I'm an admin, so I experimented while logged off.

I discovered that:

1. I can search the log by User.
2. I can search the log by Filter ID 550 only.
3. Oddly, I cannot search the log for any other filter ID.
4. I can search the log by Title.

I don't see any reason why non-admins should be unable to search the list by filter ID (and why only ID 550 seems to work is strange).
Comment 1 Kunal Mehta (Legoktm) 2013-08-19 07:40:54 UTC
Not a bug, actually a feature.

575 is set as a private filter, so only users with the correct permissions (for enwiki this is sysop or abusefilter groups) can search for it.

550 on the other hand is public so anyone can look at it.
Comment 2 Alex Matulich 2013-08-19 14:21:33 UTC
Good to know. Thanks.

As a sysop, I will say that the permission has been misapplied here. 575 should be public or available to confirmed accounts, not just sysops. It would benefit those who participate at WP:SPI.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links