Last modified: 2012-06-15 00:46:17 UTC
To facilitate allowing log-access-only for various cases (ombudsmen, ArbCom, stewards) please separate the current checkuser right into two rights: checkuser (to actually run the check) and checkuser-log (to access the log). Those in the Checkuser group would have both; ombudsmen could be given global checkuser-log access so they may monitor, but not run checks. Proposed here: http://meta.wikimedia.org/w/index.php?title=Meta_talk:Rewriting/Checkuser_policy&diff=818034&oldid=817432
Added in r39519. :)
Gerrit change #11562 improves this and checks whether to display checkuser or checkuserlog link based on permissions.