Page MenuHomePhabricator

Move "Changetags" right only for bots and administrators by default in Wikimedia production
Open, Needs TriagePublic

Description

In 99% of cases, users do not need to set manual tags, but this functionality is very easily susceptible to vandalism and is very difficult to rollback (https://www.mediawiki.org/wiki/Special:Log/tag). Those who set up wikis may not know about this functionality in principle. It seems to me that these rights should be given by default only to bots and administrators.

As you can see many wikis have requested that these rights be removed from regular users: https://phabricator.wikimedia.org/search/query/rGhue4JXkFhy/#R

Current not-default permissions:

Wiki Current ('user' default) Future not-default permissions ('bot', 'sysop' default)
cswiki bot, sysop -
commonswiki bot, sysop -
enwiki bot, sysop -
frwiki bot, autopatrolled autopatrolled
hrwiki bot, sysop -
itwiki bot, botadmin, sysop botadmin
jawiki bot, abusefilter, sysop, interface-admin abusefilter, interface-admin
metawiki bot, sysop -
ruwiki bot, sysop -
simplewiki bot, sysop -
trwiki sysop -bot
wikidata sysop -bot
simplewiki bot, sysop -
hewiki - user

Event Timeline

Do you mean "by default in Wikimedia production" or "by default for all users of MediaWiki everywhere"? The title and tag says the latter, and so is a MW product decision, but the content of your description implies the former, which is a smaller, simpler call.

Do you mean "by default in Wikimedia production" or "by default for all users of MediaWiki everywhere"? The title and tag says the latter, and so is a MW product decision, but the content of your description implies the former, which is a smaller, simpler call.

It seems to me that this would be useful in general for "by default for all users of MediaWiki everywhere". But we can start with "by default in Wikimedia production" :)

Jdforrester-WMF renamed this task from Move "Changetags" right only for bots and administrators by default to Move "Changetags" right only for bots and administrators by default in Wikimedia production.Jan 24 2024, 4:51 PM

Change 992763 had a related patch set uploaded (by Jforrester; author: Jforrester):

[operations/mediawiki-config@master] Remove 'changetags' from default's user group, grant to +sysop and +bot

https://gerrit.wikimedia.org/r/992763

Slightly unrelated, but seems like what we really should do is have an undo button on special:logs/tag

It seems to me that for now we can warn the community and ask if there are any cases where this is used:

In the near future, it is planned to remove the <code>changetags</code> right to manually [[mw:Special:MyLanguage/Manual:Tags|edit tags]] from users and give it to bots and administrators by default. This has already been done for many Wikimedia projects to prevent vandalism and incorrect tagging. If you use this functionality, please write it as a task on the Phabricator.

Hi there. A couple of questions.
If patroller X has a patrolling script that adds tags to some existing edit, will it work?
If AbuseFilter triggered by autoconfirmed adds tags to theirs edit, will it work?

If patroller X has a patrolling script that adds tags to some existing edit, will it work?

No. If https://gerrit.wikimedia.org/r/992763 gets merged, the right will only be granted to bots and sysops.

If AbuseFilter triggered by autoconfirmed adds tags to theirs edit, will it work?

Yes. Extension's actions are not affected by user rights.

One more question, please. If we "write it as a task on the Phabricator", as mentioned above, what are our chances to leave it on our wiki as is? You said nothing about this.

It seems to me that for now we can warn the community and ask if there are any cases where this is used:

Better wording to reflect what’s happening:

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

(for example)

Really hope this is the case. The current text looks like "write us, we make statistics, and abandon the current task, if there are a lot".

Most wikis have no user-defined tags. Only 123 wikis should be concerned:

1 arwiki
2 arwiktionary
3 arywiki
4 arzwiki
5 astwiki
6 azwiki
7 barwiki
8 bawiki
9 bgwiki
10 bhwiki
11 bnwiki
12 bnwikibooks
13 bnwikivoyage
14 bnwiktionary
15 cawiki
16 cawikiquote
17 ckbwiki
18 commonswiki
19 cowikimedia
20 cswiki
21 cswiktionary
22 dawiki
23 dewikisource
24 dewiktionary
25 elwiki
26 enwiki
27 enwikibooks
28 enwikisource
29 enwiktionary
30 eswiki
31 eswikisource
32 etwiki
33 fawiki
34 fawikivoyage
35 fiwiki
36 fiwikiquote
37 fiwikisource
38 fiwikiversity
39 fiwiktionary
40 frwiki
41 frwikinews
42 frwikiquote
43 frwikisource
44 frwiktionary
45 ganwiki
46 glwiki
47 hawiki
48 hewiki
49 hewikiquote
50 hewikisource
51 hewiktionary
52 hiwiki
53 hiwikibooks
54 hrwiki
55 huwiki
56 hywiki
57 idwiki
58 incubatorwiki
59 itwiki
60 itwikibooks
61 itwiktionary
62 jawiki
63 jawikibooks
64 jawikivoyage
65 kaawiki
66 kawiki
67 knwiki
68 kowiki
69 kswiki
70 kuwiktionary
71 kywiki
72 ltwiki
73 mediawikiwiki
74 metawiki
75 mkwiki
76 mlwiki
77 mrwikisource
78 mswiki
79 newiki
80 nlwiki
81 nlwiktionary
82 nowiki
83 orwiki
84 pawiki
85 plwiki
86 plwikisource
87 plwiktionary
88 ptwiki
89 ptwikinews
90 ruwiki
91 ruwikisource
92 shwiki
93 simplewiki
94 specieswiki
95 sqwiki
96 srwiki
97 svwiki
98 tawiki
99 test2wiki
100 testcommonswiki
101 testwiki
102 testwikidatawiki
103 tewiki
104 tgwiki
105 thwiki
106 trwiki
107 trwikiquote
108 ukwikisource
109 urwiki
110 uzwiki
111 vecwiki
112 viwiki
113 viwikibooks
114 wikidatawiki
115 yuewiktionary
116 zhwiki
117 zhwikinews
118 zhwikiquote
119 zhwikiversity
120 zhwikivoyage
121 zhwiktionary
122 zh_classicalwiki
123 zh_yuewiki

Being on the list doesn't necessarily mean the wiki needs to have an exception. Each wiki should check their activity on Special:Log/tag and decide if they are affected.

In T355639#9561710, @stjn wrote:

will be removed from users and bots by default in Wikimedia sites

Just users. The task description says:

only for bots and administrators by default

Most wikis have no user-defined tags. Only 123 wikis should be concerned:

1 arwiki
2 arwiktionary
3 arywiki
4 arzwiki
5 astwiki
6 azwiki
7 barwiki
8 bawiki
9 bgwiki
10 bhwiki
11 bnwiki
12 bnwikibooks
13 bnwikivoyage
14 bnwiktionary
15 cawiki
16 cawikiquote
17 ckbwiki
18 commonswiki
19 cowikimedia
20 cswiki
21 cswiktionary
22 dawiki
23 dewikisource
24 dewiktionary
25 elwiki
26 enwiki
27 enwikibooks
28 enwikisource
29 enwiktionary
30 eswiki
31 eswikisource
32 etwiki
33 fawiki
34 fawikivoyage
35 fiwiki
36 fiwikiquote
37 fiwikisource
38 fiwikiversity
39 fiwiktionary
40 frwiki
41 frwikinews
42 frwikiquote
43 frwikisource
44 frwiktionary
45 ganwiki
46 glwiki
47 hawiki
48 hewiki
49 hewikiquote
50 hewikisource
51 hewiktionary
52 hiwiki
53 hiwikibooks
54 hrwiki
55 huwiki
56 hywiki
57 idwiki
58 incubatorwiki
59 itwiki
60 itwikibooks
61 itwiktionary
62 jawiki
63 jawikibooks
64 jawikivoyage
65 kaawiki
66 kawiki
67 knwiki
68 kowiki
69 kswiki
70 kuwiktionary
71 kywiki
72 ltwiki
73 mediawikiwiki
74 metawiki
75 mkwiki
76 mlwiki
77 mrwikisource
78 mswiki
79 newiki
80 nlwiki
81 nlwiktionary
82 nowiki
83 orwiki
84 pawiki
85 plwiki
86 plwikisource
87 plwiktionary
88 ptwiki
89 ptwikinews
90 ruwiki
91 ruwikisource
92 shwiki
93 simplewiki
94 specieswiki
95 sqwiki
96 srwiki
97 svwiki
98 tawiki
99 test2wiki
100 testcommonswiki
101 testwiki
102 testwikidatawiki
103 tewiki
104 tgwiki
105 thwiki
106 trwiki
107 trwikiquote
108 ukwikisource
109 urwiki
110 uzwiki
111 vecwiki
112 viwiki
113 viwikibooks
114 wikidatawiki
115 yuewiktionary
116 zhwiki
117 zhwikinews
118 zhwikiquote
119 zhwikiversity
120 zhwikivoyage
121 zhwiktionary
122 zh_classicalwiki
123 zh_yuewiki

Being on the list doesn't necessarily mean the wiki needs to have an exception. Each wiki should check their activity on Special:Log/tag and decide if they are affected.

Can you please check and let me know what's concerning regarding the Serbian Wikipedia?

srwiki has three user-defined tags: Дискусија на Викимедијиној Остави, ToDoLister, Adiutor. But the activity on Special:Log/tag is minimal (and possibly unconstructive, exactly why the change would be useful).

The tags are added by tools, for which the user needs the applychangetags right (which is not being changed). Therefore, your wiki should be safe. And I think this is the case for most of the concerned wikis.

In T355639#9561710, @stjn wrote:

Better wording to reflect what’s happening:

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

Thanks!

Really hope this is the case. The current text looks like "write us, we make statistics, and abandon the current task, if there are a lot".

In 95% of cases, manual tags is not required. All projects where this flag has already been reassigned will be preserved. If someone needs to retain this right for users, they should write here :)

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

@Iniquity
For Tech News, what date should I put in the [insert date]?

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

@Iniquity
For Tech News, what date should I put in the [insert date]?

Hi :) This is hard question, @Jdforrester-WMF, can you help with it?

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

@Iniquity
For Tech News, what date should I put in the [insert date]?

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

@Iniquity
For Tech News, what date should I put in the [insert date]?

Hi :) This is hard question, @Jdforrester-WMF, can you help with it?

I put before the end of March. Hopefully, this is fine. Thanks!

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

@Iniquity
For Tech News, what date should I put in the [insert date]?

Future change: The right to change [[mw:Special:MyLanguage/Manual:Tags|edit tags]] (<code>changetags</code>) will be removed from users and bots by default in Wikimedia sites. Your community can ask to keep the old configuration on your wiki before this change happens. This needs to be done by [insert date] at T355639.

@Iniquity
For Tech News, what date should I put in the [insert date]?

Hi :) This is hard question, @Jdforrester-WMF, can you help with it?

I put before the end of March. Hopefully, this is fine. Thanks!

I also thought about this deadline. Thanks :)

One more question, please. If we "write it as a task on the Phabricator", as mentioned above, what are our chances to leave it on our wiki as is? You said nothing about this.

While we're waiting for the answer, one more question, please. When you say in the Tech News that "Your community can ask to retain the old configuration on your wiki before this change happens.", what do you expect? A local concensus? A request from random user? A request from somebody that actualy used this? Thank you.

One more question, please. If we "write it as a task on the Phabricator", as mentioned above, what are our chances to leave it on our wiki as is? You said nothing about this.

While we're waiting for the answer, one more question, please. When you say in the Tech News that "Your community can ask to retain the old configuration on your wiki before this change happens.", what do you expect? A local concensus? A request from random user? A request from somebody that actualy used this? Thank you.

For both questions, a link to the discussion on the wiki with a request to keep everything as it is + minimal consensus is enough.

One more question, please. If we "write it as a task on the Phabricator", as mentioned above, what are our chances to leave it on our wiki as is? You said nothing about this.

While we're waiting for the answer, one more question, please. When you say in the Tech News that "Your community can ask to retain the old configuration on your wiki before this change happens.", what do you expect? A local concensus? A request from random user? A request from somebody that actualy used this? Thank you.

For both questions, a link to the discussion on the wiki with a request to keep everything as it is + minimal consensus is enough.

Great, thanks a lot.

What is the chart attempting to show? e.g. on commonsiki it appears this will change from (bot, sysop) to (none)? Or is it currently manually at (bot,sysop) and it will change to (default) ((which will be bot,sysop))?

Or is it currently manually at (bot,sysop) and it will change to (default) ((which will be bot,sysop))?

This

I request to cancel the change for hewiki, please. The community decided to ask this, in Village pump, with more than enough voices, at least 31 supported from 32 that participated. You can find the voting over here. Thank you.

Change #1013975 had a related patch set uploaded (by Jforrester; author: Jforrester):

[operations/mediawiki-config@master] Remove 'changetags' from default's user group, grant to +sysop and +bot

https://gerrit.wikimedia.org/r/1013975

@Jdforrester-WMF hi! :) Have we any blockers for your patch?