Last modified: 2014-10-20 16:02:22 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T73695, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 71695 - SecurePoll: Add minimal logging functionality
SecurePoll: Add minimal logging functionality
Status: RESOLVED FIXED
Product: MediaWiki extensions
Classification: Unclassified
SecurePoll (Other open bugs)
unspecified
All All
: High enhancement (vote)
: ---
Assigned To: Brad Jorsch
:
Depends on:
Blocks: 68118
  Show dependency treegraph
 
Reported: 2014-10-06 05:40 UTC by Dan Garry
Modified: 2014-10-20 16:02 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Dan Garry 2014-10-06 05:40:42 UTC
Whenever a poll is created, edited, or modified, dump an XML copy of the poll into a SecurePoll namespace on votewiki, with the GPG keys removed for security, sorted by language. That way if a poll is changed, a technical user can diff the XML copies of the poll and figure out what was changed.

e.g. [[SecurePoll:152/en]] would contain the full history of changes to the English version of poll 152.
Comment 1 Brad Jorsch 2014-10-09 16:56:58 UTC
Should the manually-entered voter lists (eligibility list (sometimes), override list, exclude list) be dumped too, or should those lists be considered private? Should the job that builds the automatically-generated list log its starting and stopping on each wiki (and should that go to the individual wikis or to the main wiki)?
Comment 2 Dan Garry 2014-10-09 17:57:43 UTC
(In reply to Brad Jorsch from comment #1)
> Should the manually-entered voter lists (eligibility list (sometimes),
> override list, exclude list) be dumped too, or should those lists be
> considered private?

In my opinion, yes. Part of the reason the logs are needed is to increase transparency, so this is part of that. Curious to hear James's thoughts on this.

> Should the job that builds the automatically-generated
> list log its starting and stopping on each wiki (and should that go to the
> individual wikis or to the main wiki)?

Ideally this would be logged, but Erik's point about not polluting normal wikis with the SecurePoll namespace still holds. If that means we'd fill the votewiki log with hundreds of messages about that starting and stopping on all 800 wikis, and therefore decreasing signal-to-noise ratio of the log, then we shouldn't bother logging it.
Comment 3 Gerrit Notification Bot 2014-10-10 15:33:07 UTC
Change 166056 had a related patch set uploaded by Anomie:
Add editing and logging and other general work

https://gerrit.wikimedia.org/r/166056
Comment 4 Gerrit Notification Bot 2014-10-18 01:01:03 UTC
Change 166056 merged by jenkins-bot:
Add editing and logging and other general work

https://gerrit.wikimedia.org/r/166056
Comment 5 Gerrit Notification Bot 2014-10-20 15:27:46 UTC
Change 167586 had a related patch set uploaded by Anomie:
Add editing and logging and other general work

https://gerrit.wikimedia.org/r/167586
Comment 6 Gerrit Notification Bot 2014-10-20 15:28:34 UTC
Change 167586 merged by jenkins-bot:
Add editing and logging and other general work

https://gerrit.wikimedia.org/r/167586

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links