Last modified: 2014-08-28 08:03:46 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T29242, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 27242 - Allow users to see their own stored private information ("self-CheckUser")
Allow users to see their own stored private information ("self-CheckUser")
Status: NEW
Product: MediaWiki extensions
Classification: Unclassified
Extensions requests (Other open bugs)
unspecified
All All
: Low enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
https://www.mediawiki.org/wiki/Reques...
: design
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2011-02-08 06:46 UTC by MZMcBride
Modified: 2014-08-28 08:03 UTC (History)
17 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description MZMcBride 2011-02-08 06:46:18 UTC
Users should be able to see what a particular wiki is storing about them using the CheckUser tool or some equivalent. This would include stored IP addresses and user-agents, namely. I think this would be mostly interesting to users, but it might have other use-cases as well.
Comment 1 Mark A. Hershberger 2011-02-08 22:39:25 UTC
Don't we make an effort *not* to store information?  Wouldn't this sort of extension require us to store the information we don't store?  Or, at least, copy the information that is currently only kept in log files?
Comment 2 Bawolff (Brian Wolff) 2011-02-08 22:41:39 UTC
I think what is being requested is to just be able to see the information currently available to checkusers, not to store new information.
Comment 3 MZMcBride 2011-02-08 23:57:13 UTC
(In reply to comment #1)
> Don't we make an effort *not* to store information?  Wouldn't this sort of
> extension require us to store the information we don't store?  Or, at least,
> copy the information that is currently only kept in log files?

Information such as past used IP addresses and user agents is already stored (for 30 days, by default). It can be queried via the CheckUser extension without extending the storage duration or even altering the database (except updating the CheckUser log). You don't need to store the results of the query (the CheckUser extension doesn't, for example). For self-checks, you probably don't even need to log the queries, but that's debatable, I suppose.
Comment 4 AGK 2011-10-31 23:49:32 UTC
No, this is a terrible idea. If we really wanted to make it super easy for inexperienced sockers to game the CU system, we would have replaced the Main Page with your Guide To Socking.
Comment 5 AGK 2011-10-31 23:51:50 UTC
Changed priority to low not due to its merits but because of the nature of this enhancement (it is a wanted extra feature, not an improvement requiring urgency).
Comment 6 Platonides 2011-10-31 23:55:46 UTC
Isn't this a duplicate of some other wontfixed bug?
Comment 7 Brion Vibber 2011-11-01 00:08:57 UTC
I do like the 'freedom of information act' feel of being able to look up whatever data is recorded... Recommend at least keeping it under consideration.
Comment 8 p858snake 2011-11-01 00:17:26 UTC
We could make it a config option to disable the feature for sites that don't want it
Comment 9 MZMcBride 2013-03-16 01:55:55 UTC
Possibly related: <https://gerrit.wikimedia.org/r/53683>.

Instead of only storing last login time, we could also store IP addresses and User-Agent strings of logins, for account security purposes. I think Gmail and others do this.
Comment 10 Peter Gehres 2013-03-16 02:15:31 UTC
In re Extension:AccountAudit, maybe.  The goal of this extension is to finalize the SUL migration and then un-deploy the extension.  There is also talk of adding the last login table to core.

I like the idea of allowing self-CU, but I think that should be part of Extension:CheckUser.
Comment 12 AGK 2013-03-21 23:14:10 UTC
For a variety of reasons (not least that this kind of feature is *expected* of large websites today), I would withdraw my earlier opposition to this feature request.
Comment 13 Luis Villa (WMF Legal) 2013-12-17 21:22:13 UTC
Note that there has been some discussion (including a comment by legal) on the talk page: https://www.mediawiki.org/wiki/Talk:Requests_for_comment/Retained_account_data_self-discovery
Comment 14 MZMcBride 2013-12-18 14:07:44 UTC
This needs a mock. I'll see what I can do about getting one made.
Comment 15 Kunal Mehta (Legoktm) 2014-02-18 07:40:25 UTC
[[mw:Extension:AccountInfo]] does this, supporting both the $wgPutIPinRC option (enabled by default) and CheckUser.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links