[Bug 15641] Blocked administrator inconsistencies

2011-10-07 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

--- Comment #15 from Happy-melon  2011-10-07 
14:05:42 UTC ---
For reference, I like the implementation idea for this I brainstormed in r93246
CR (basically making "isblocked" an implicit group which we can then use with
$wgRevokePermissions).

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2011-10-07 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

--- Comment #14 from Max Semenik  2011-10-07 14:03:31 
UTC ---
Grr, r99211.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2011-10-07 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Max Semenik  changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 CC||maxsem.w...@gmail.com
 Resolution|FIXED   |

--- Comment #13 from Max Semenik  2011-10-07 13:59:51 
UTC ---
Reverted in r93246.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2011-07-26 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Happy-melon  changed:

   What|Removed |Added

 Status|REOPENED|RESOLVED
 Resolution||FIXED

--- Comment #12 from Happy-melon  2011-07-26 
20:57:53 UTC ---
This should be fixed in r93206.  Feel free to reopen if you find any more
permissions that admins shouldn't have while blocked.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2011-07-23 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Rd232  changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 CC||rd...@hotmail.com
 Resolution|FIXED   |

--- Comment #11 from Rd232  2011-07-23 21:00:11 UTC ---
As far as I can tell blocked administrators still have access to some
administrative rights, in particular "browserarchive", "deletedhistory", and
"deletedtext". These should also be suspended when blocked. Indeed, with the
sole exception of self-unblocking (because of mistakes and "rogue admin"
scenarios in small wikis), I would have thought that blocked users should only
have access to whatever user rights are associated with the "all editors"
group. 

At any rate, on Wikimedia wikis, having blocked administrators - potentially
compromised accounts whose status is not yet clear enough to desysop - able to
access deleted material, even for a few hours or days, seems BAD, given the WMF
emphasis on these rights being sensitive.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2011-03-30 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Happy-melon  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED

--- Comment #10 from Happy-melon  2011-03-30 
14:08:43 UTC ---
Fixed in r85005.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2010-04-21 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Charitwo  changed:

   What|Removed |Added

 CC||chari...@gmail.com

--- Comment #9 from Charitwo  2010-04-21 22:55:50 UTC ---
It seems that blocked users with the appropriate rights can still import pages
via XML.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2010-03-26 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Happy-melon  changed:

   What|Removed |Added

 CC||happy-me...@live.com

--- Comment #8 from Happy-melon  2010-03-26 22:05:44 UTC 
---
Access to block/unblock fixed in r64228: blocked admins cannot block or unblock
other users, nor unblock themselves unless they have the 'unblockself' right.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2010-02-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Mike.lifeguard  changed:

   What|Removed |Added

 CC||mike.lifegu...@gmail.com

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are watching all bug changes.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2010-02-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

--- Comment #7 from FT2  2010-02-10 18:14:28 UTC ---
Noting also from bug 21882 that "per permission" blocking is not what's needed.
 There are very many permissions a user can have. This issue is one item and
should ideally be automatic (shouldn't need any checkbox).

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2010-02-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

--- Comment #6 from FT2  2010-02-10 18:11:57 UTC ---
(Copied from bug 21882)

An administrator who is blocked, should lose the use of most admin tools,
except perhaps the passive IP Block Exemption, and the ability to block and
unblock.

Rationale:

Blocking admins happens very rarely, in general only when there is a concern
about present and immediate conduct, sysop account compromise and the like and
while waiting for the local temporary desysop process to be completed. 

When an administrator account is blocked, it seems illogical that they cannot
edit, but they can delete, undelete, protect, unproptect, view deleted
material, and so on. 

Admin tools are more sensitive and require more trust than editing tools. A
sysop account that is blocked, should lose the tool access until the matter is
resolved, subject to keeping IP Block Exemption (needed to post appeals or
responses) and block/unblock ability (for test purposes when an admin
self-blocks or their IP is accidentally blocked)

Misuse of the block/unblock tool will be noticed by the community and met by
the further step of removing that account's sysop access if needed, hence not
an
issue. It is easier to allow block/unblock on that basis than to figure what
unblocks they may need to do on various MW installations, to remedy a problem.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 15641] Blocked administrator inconsistencies

2010-02-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=15641

Alexandre Emsenhuber [IAlex]  changed:

   What|Removed |Added

 CC||ft2.w...@gmail.com

--- Comment #5 from Alexandre Emsenhuber [IAlex]  
2010-02-10 16:05:09 UTC ---
*** Bug 21882 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l