Per parent task,
editmyoptions, editmyprivateinfo, editmywatchlist, viewmyprivateinfo, viewmywatchlist
Should be locked to * because there's no need to ever not be
oathauth-enable
Is used to control 2FA settings so most definately needs to be our you can't enable 2FA via that wiki
| Status | Assigned | Task | ||
|---|---|---|---|---|
| Resolved | Reception123 | T7255 User unable to confirm e-mail address using link they get in e-mail | ||
| Resolved | Reception123 | T7257 Expand managewiki blacklist for * |
@Reception123 This is fine, and I was going to suggest this as well; however, some wikis had already removed these. Did you also do a database query update to re-add these rights to * on wikis that removed them? This is what we did when we removed managewiki from * and blacklisted it from being used in the * group
My understanding was that this would be overridden by LocalSettings.php, because here the issue isn't that it was added to * (like managewiki was) but instead that they were removed from *
@Reception123 Ah, true, yeah, I was thinking about that after. In this case, you're not removing rights from being added to *, you're adding them to the * group and preventing them from changed in that group in ManageWiki, essentially. So, yeah, we should probably be fine. :)