https://bugzilla.wikimedia.org/show_bug.cgi?id=30636

--- Comment #16 from Happy-melon <[email protected]> 2011-09-24 
11:53:23 UTC ---
(In reply to comment #15)
> (In reply to comment #12)
> The use case where this extension is needed is mediawiki installations with
> managed users. Typically users are not creating their accounts themselves, an
> admin has done it for for them. Often a substantial fraction of users has only
> limited training for specific tasks, not full understanding of mediawiki
> special pages. Replacing forgotten passwords is an admin responsibility. While
> logging would be nice, it is not absolutely required.

In no circumstances is administrators knowing other users' plaintext passwords
a sensible security policy, even on a managed wiki (of which I run several). 
I'd be happy to consider implementing either a SwitchUser functionality or a
root password, both with proper logging.

> If changing the special page name of the extension is the best possible
> solution, it is better than to break all managed mediawiki installations. 
> There
> are doubtlessly many extensions outside of the WMF managed SVN repository, and
> respecting their special page names is not expected. 

the WMF SVN extensions are not "managed"; no *guarantee* is made by the core
developers that they will not break them (that guarrantee is only available for
extensions used on the Wikimedia cluster).  We do *try* not to break them, but
it is only a best effort.

> I am not sure, however,
> why mw core must break a mediawiki.org SVN managed extension without a good
> reason. If there is a good reason that the core page must be the preoccupied
> "PasswordReset" instead of the (to my knowledge) available "ResetPassword" 
> then
> please change the extension special page name.

ResetPassword is not free because it has for many years been defined as an
alias to ChangePassword (which used to be called Resetpass).

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to