Last modified: 2012-03-10 02:58:49 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T37104, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 35104 - Enable Extension:Sudo on WMF cluster
Enable Extension:Sudo on WMF cluster
Status: RESOLVED WONTFIX
Product: Wikimedia
Classification: Unclassified
Extension setup (Other open bugs)
unspecified
All All
: Unprioritized enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
https://www.mediawiki.org/wiki/Extens...
: patch-need-review
Depends on:
Blocks: 31235
  Show dependency treegraph
 
Reported: 2012-03-09 23:58 UTC by Sam Reed (reedy)
Modified: 2012-03-10 02:58 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Sam Reed (reedy) 2012-03-09 23:58:59 UTC
Has many debugging purposes (ie working in a users current environment based on preferences. Doesn't help for browser issues). Obviously rights wouldn't be given out to most people...
Comment 1 Daniel Friesen 2012-03-10 00:31:22 UTC
*snickers* ...What?

We're not going to make this one "RESOLVED HUMOROUS" are we?

;) You do realize I wrote Extension:Sudo as a gag extension like CStyleWikiIncludes was.

There are probably better ways to let people test preferences. Like a separate extension that hooks into the preference system and lets you temporarily override your own preferences with that of another user.

Sudo, while it does log the initial user switch (so there's at least a minimal culpability for anything you may do) lets you basically take complete control over an account. All their rights. You can make edits attributed to their name which show up in their own contributions. You can view their private watchlists. Completely screw up their preferences with no one knowing what you changed. etc...
Comment 2 Daniel Friesen 2012-03-10 00:31:46 UTC
I'm also not sure if it's even compatible with CentralAuth.
Comment 3 Sam Reed (reedy) 2012-03-10 02:52:58 UTC
(In reply to comment #1)
> *snickers* ...What?
> 
> We're not going to make this one "RESOLVED HUMOROUS" are we?

Although it it somewhat amusing, there really are quite a few proper use cases to have a feature like this in some form or another.

Hell, even locking it down further (no editing etc), and just being able to view stuff as if you were the user would have reasonable advantage
Comment 4 MZMcBride 2012-03-10 02:58:49 UTC
Marking this as WONTFIX.

Perhaps better debugging tools are needed, but this is almost certainly not the way to go about debugging user issues. And any benefits from other possible use-cases for this extension are far outweighed by the potential for abuse.

No, just no.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links