[Labs-l] [Labs-announce] [notice] DB replicas user_properties view redaction

John phoenixoverride at gmail.com
Fri Dec 2 00:06:48 UTC 2016


The fields listed here are not available via the API

On Thu, Dec 1, 2016 at 7:01 PM, Huji Lee <huji.huji at gmail.com> wrote:

> I am not complaining! I am saying to remove any field with a "security"
> justification only makes sense if it is also redacted from the API, etc.
> Our security standards should be almost identical in situations like this,
> is my point.
>
> On Thu, Dec 1, 2016 at 10:21 AM, Brad Jorsch (Anomie) <
> bjorsch at wikimedia.org> wrote:
>
>> On Wed, Nov 30, 2016 at 9:14 PM, Huji Lee <huji.huji at gmail.com> wrote:
>>
>>> Makes no sense to me to exclude data from these tables that is already
>>> available through MediaWiki API. Why would you hide "gender" here when it
>>> is accessible through something like [1]?
>>>
>>
>> It's also available via the {{gender:}} magic word.
>>
>> But I don't know why you're complaining about hiding "gender" when it is
>> still available via the user_properties view, along with "disablemail",
>> "fancysig", and "nickname".
>>
>>
>> --
>> Brad Jorsch (Anomie)
>> Senior Software Engineer
>> Wikimedia Foundation
>>
>> _______________________________________________
>> Labs-l mailing list
>> Labs-l at lists.wikimedia.org
>> https://lists.wikimedia.org/mailman/listinfo/labs-l
>>
>>
>
> _______________________________________________
> Labs-l mailing list
> Labs-l at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-l
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20161201/ba5b2d4c/attachment.html>


More information about the Labs-l mailing list