I don’t think that access to the special page should be restricted, however I think that it should only be accessible from Meta, Login Wiki, and (maybe) Miraheze Commons. Meta and login wiki are the two “main” or “central” Miraheze websites so to speak, and Miraheze Commons will eventually be the MH Image repo. Therefore, I think that limiting access to the special page to only these three sites will help with tracking across the entire wiki farm, although I do believe that any registered user who is logged in should be able to see the page, as combating vandalism shouldn’t be restricted to users with advanced permissions.

@AmandaCath If it tells you what files were uploaded to private wikis, it would have to be restricted. Otherwise I wouldn't see the need I suppose.

Could easily introduce a right allowing certain people to view images on private wikis.

We would only need to introduce a nda with that right if we have it to other users, but currently I think we are planning on doing stewards + sysadmins.

In T3582#69522, @Paladox wrote:

We would need to introduce a nda with that right too @John

no?

Would be restricted to stewards and sysadmins.

In T3582#69522, @Paladox wrote:

We would only need to introduce a nda with that right if we have it to other users, but currently I think we are planning on doing stewards + sysadmins.

No need for an NDA as it's a technical legal agreement. If voted by the community it's NDA exempt.

I wanted to do this by rewriting the existing Special:ListFiles and then realised it'll need to have every wiki defined as a repo source (meaning every wiki shares every other wikis images... which is, bad shall we say). I've now decided that if I just write a DB table and a relatively simple SpecialPage/pager and a hook, this can be so much easier and allow us granular control over who accesses stuff. Further we could hook it into the CW hooks and mass update all images' public/private state.

I could probably get this done in the next few hours.