Michael added a comment.
In T231887#5525667 <https://phabricator.wikimedia.org/T231887#5525667>, @Lucas_Werkmeister_WMDE wrote: > [...] basically, we add `assert='user'` or `assertuser=mw.config.get('wgUserName')` (not sure which) to the `wbeditentity` request if the user is logged in locally; rely on CentralAuth to do the right thing™; and if the assert fails, ask the user to log in and try again? Yes exactly, that would be my recommendation. I think `assert='user'` vs `assertuser=mw.config.get('wgUserName')` is only relevant when considering federation (And if we are considering federation then that would open yet another can of worms.). My suggestion would be to go with `assert='user'` as this is the least strict assertion that still enforces our central requirement (no IP bleed). TASK DETAIL https://phabricator.wikimedia.org/T231887 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Michael Cc: Lucas_Werkmeister_WMDE, Matthias_Geisler_WMDE, Addshore, Aklapper, Lydia_Pintscher, darthmon_wmde, Michael, DannyS712, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, aude, Mbch331
_______________________________________________ Wikidata-bugs mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
