Jump to content

Project:Requests for permissions/RfC/Removal of inactive bureaucrats and interface admins

From mediawiki.org

Proposal to remove long-term inactive bureaucrats and interface admins

[edit]
Edit
Affected users
S/N User Last edit Comment
1 Reach Out to the Truth 2017-11-18 —
2 Liangent 2017-11-13 —
3 SVG 2017-11-05 I'm active again. Tim (SVG) 08:25, 25 May 2020 (UTC)
4 Eloquence 2017-10-01 —
5 YuviPanda 2017-09-28 —
6 Jackmcbarn 2017-07-18 I'm active again. Jackmcbarn (talk) 06:13, 3 August 2020 (UTC)[reply]
7 Sumanah 2017-07-14 —
8 Varnent 2017-06-13 —
9 Ebernhardson 2017-03-15 —
10 Tim.landscheidt 2017-03-01 —
11 Pmlineditor 2017-02-15 —
12 Hannibal 2016-12-21 —
13 Aude 2016-12-07 —
14 Christopher Johnson (WMDE) 2016-12-01 Staff
15 Guillom 2016-11-30 —
16 Grind24 2016-11-15 —
17 PleaseStand 2016-09-29 —
18 Edokter 2016-08-13 —
19 RobLa 2016-04-03 —
20 Bene* 2016-03-06 —
21 Church of emacs 2016-03-03 —
22 Thehelpfulone 2016-02-24 —
23 Dragons flight 2016-01-14 —
24 Lhridley 2015-11-14 —
25 Ypnypn 2015-09-08 —
26 Robmoen 2015-08-04 —
27 Manybubbles 2015-06-23 —
28 Inez 2015-06-11 —
29 Diego Grez-Cañete 2015-03-14 —
30 Zakgreant 2015-02-23 —
31 Barras 2015-01-24 —
32 Mr.Z-man 2015-01-21 —
33 IAlex 2014-11-16 —
34 BladeBronson 2014-10-17 —
35 Werdna 2014-10-03 —
36 Amusso (WMF) 2014-09-15 Staff
37 Awjrichards 2014-09-05 —
38 Fran Rogers 2014-09-01 —
39 X! 2014-07-30 —
40 OverlordQ 2014-07-16 —
41 Tychay 2014-06-25 —
42 Drdee 2014-03-01 —
43 Heatherawalls 2014-02-24 —
44 RobertL 2014-02-16 —
45 Johnduhart 2014-01-28 —
46 VasilievVV 2014-01-25 —
47 Happy-melon 2013-12-12 —
48 Bdk 2013-11-12 —
49 Bryan 2013-08-04 —
50 Anubhav iitr 2013-08-02 —
51 Flominator 2013-07-26 —
52 Cbrown1023 2013-01-25 —
53 Cmelbye 2012-07-04 —
54 Kalan 2012-04-17 —
55 Splarka 2011-12-13 —
56 Gregdek 2011-10-26 —
57 DieBuche 2011-07-25 —
58 Ævar Arnfjörð Bjarmason 2011-04-17 —
59 Titoxd 2011-02-13 —
60 Midom 2010-03-01 —
61 Misza13 2009-07-06 —
62 TheFearow 2008-10-19 —
63 Ral315 2008-06-26 —
64 Fire 2008-05-15 —
65 AmiDaniel 2008-01-12 —
66 Elian 2006-03-21 —


From the previous 2 RfCs, it seems clear that admin rights can be held indefinitely. However, neither of them mentioned about the crat and IA flag which are fairly sensitive as both (in a way) can edit the site interface and I believe that they should be subject to the admin activity review.

  1. I propose the removal of the crat flag and IA flag if the user is inactive for more than 2 years and 1 year respectively. Affected users are listed above.
  2. To ensure that inactive crats and IAs will have their rights removed, I am also proposing a yearly review, probably in April?. Affected users will be notified on their talk page and emails (if possible) on April 1 and if there isn't any reply to keep the flag:
    1. crats: A request will be posted on meta to remove the flag a week later (April 8).
    2. IAs: A local request for a crat to remove the flag a week later (April 8)

This is solely due to security reasons and if the user decides to come back, they can have the flag back. Minorax (talk) 10:49, 23 February 2020 (UTC)[reply]

About to log off, but just a note: Stewardry is wrong. Remember the dot's last edit given is from before interface admins were a thing - used the permissions in august. MZMcBride last edited in December 2019, not 2007, and Midom last edited in 2010 (a while ago, yes, but after 2005). The chard above isn't an accurate list of who would be affected under the proposal. --DannyS712 (talk) 10:59, 23 February 2020 (UTC)[reply]
Ah yes my bad for this sloppy work. However, the main point of this proposal would be the new policy on removing inactive right holders. The affected users will be re-checked again if this proposal passes. Thanks for your note :) Minorax (talk) 11:13, 23 February 2020 (UTC)[reply]

Does inactive mean "doesn't edit in general" or "doesn't have recent entries making use of their rights?" I ask because this wiki is fairly low-traffic in terms of rights requests, such that 1-3 crats largely handle every request for permissions. Just because I (or another crat) mostly handle that area doesn't necessarily mean the other crats are inactive. That being said, I am largely in support of a policy to remove rights from inactive accounts so long as we can get a good enough qualification of what activity means in the somewhat unique context of mediawiki.org. I know in the recent RfC about removing inactive sysops, it was brought up by @Legoktm: that some users are still very active on IRC, phabricator, gerrit, etc. I personally think that measuring off-wiki activity is not useful for whether or not on-wiki rights should be kept, because those users can still do everything they need to do on IRC, phabricator, gerrit, etc. without needing elevated privileges on-wiki. Should they wish to retain such privileges however, we need a process to alert the users in question on their talk pages so they can affirmatively say they'd like to hold onto it (if we define "activity" as "any edits" this would also flag them as active again). If they lose it and need it back in the future, I feel it would be pretty uncontroversial to re-grant such permissions. --Skizzerz 20:31, 24 February 2020 (UTC)[reply]

@Skizzerz: I'd generally prefer going with total inactivity, no edits, no actions. To add on with removing inactive sysops, I'll also support in removing the inactive sysops (we have too many (212) here). Perhaps maybe have the same criteria as proposed above for crats (2 years)? Minorax (talk) 09:10, 25 February 2020 (UTC)[reply]
Note, User:Amusso (WMF) more commonly edits as User:Hashar. Both User:Emufarmers and User:MZMcBride are still around (I see them on irc a lot) even if they don't have all that many actions here. I support them keeping their rights. Leaning to remove for the others, unless they write a comment saying they want to keep the rights. Also, have all these users in question been notified of this request? Bawolff (talk) 05:15, 27 February 2020 (UTC)[reply]
@Bawolff: This is a proposal on the policy so there isn't a need to notify those mentioned above as their rights won't be immediately removed if this RFC passes. Minorax (talk) 05:24, 27 February 2020 (UTC)[reply]
that's pretty unclear given its on the request for adminship page. Regardless, i still think policy proposals that disproportionately affect certain users should notify those users. Bawolff (talk) 09:38, 27 February 2020 (UTC)[reply]

+1 throw these bums out. —Emufarmers(T|C) 05:30, 27 February 2020 (UTC)[reply]

I'm boggling at the table a bit. It has inaccurate data, but at least it's noted(???). And someone has already pointed out the plainly wrong last edit for my account, and someone else just shrugged it off. And it's a table of 11 users, not hundreds... baffling. I looked at Project:Requests just now and there's a single request that appears to have been declined. I believe local bureaucrats are no longer doing user renames, so I'm curious if there's some work I should be doing that's getting missed? --MZMcBride (talk) 02:11, 28 February 2020 (UTC)[reply]

I've notified all except Emufarmers & MZMcBride since they know the RfC exists and already replied here. As for the staff account, I decided to not notify them. Minorax (talk) 04:08, 29 February 2020 (UTC)[reply]
@Minorax: can you work on getting a more accurate table? While this request is aimed at setting a general activity policy in general, having an accurate representation of who it would impact would be nice to avoid confusion and angst. @MZMcBride: there's nothing you're missing, demand for local crats is incredibly low here. We may get like 2-3 new requests for permissions a month, and that's about it.
The reason I'm in support of a general policy (i.e. a set of criteria that will be applied going forwards, not just narrowly scoped to the users in some table generated via questionable means) is that it reduces the wiki's attack surface in the event of a compromised account. Ideally, all crats and interface admins will have 2FA enabled, but not all sysops will. I know this particular RfC is scoped for just crats and interface admins, but it is something I'd like to extend to all privileged access (whether now or in the future). However, given the low amount of work here that privileged access is actually needed for (at least on the crat side), I also want the criteria for being "active" to not rely on requiring the use of such rights. It would not be fair to MZMcBride (for example) if they were to lose crat simply because someone else jumped in faster to handle those 2-3 permissions requests a month. In the same vein, I'd be fine with waiving any activity requirements for accounts with 2FA enabled, because the barrier to compromising such accounts is significantly higher. --Skizzerz 17:52, 29 February 2020 (UTC)[reply]
@Skizzerz: I'll do it later and will only include the last edit for the user, probably taking 1 year as a bench mark and we'll see how this goes. Minorax (talk) 01:44, 1 March 2020 (UTC)[reply]
Updated to include all sysops that did not edit in the past 2 years. Minorax (talk) 03:19, 1 March 2020 (UTC)[reply]

AAR

[edit]

Let's see if we can get momentum on this again. I've been looking at the past (unsuccessful) attempts to impose activity requirements, and the AAR was brought up in that. Since that mechanism already exists (and we need stewards to handle removal of the rights anyway), I think opting our wiki into that would be a good idea. The requirements in AAR are pretty lax, you don't get deflagged unless you have no edits or log actions in the past 2 years, and you get a notice before any deflagging happens. If you do get your access removed but do end up needing them, it would likely not be a difficult task to succeed in a rights request to get them back. Going to start a straw poll below to gauge the community's level of support on opting us into AAR. As the review is conducted by the stewards at regular intervals, the table above won't be used as any sort of basis to determine who would potentially lose flags. --Skizzerz 19:58, 4 July 2020 (UTC)[reply]

  • Support I support having AAR for this wiki. --Skizzerz 19:58, 4 July 2020 (UTC)[reply]
  • Support using AAR --DannyS712 (talk) 20:10, 4 July 2020 (UTC)[reply]
  • Support as suggested previously. —MarcoAurelio (talk) 09:20, 5 July 2020 (UTC)[reply]
  • Support --Minorax (talk) 15:49, 5 July 2020 (UTC)[reply]
  • Support. We can easily re-grant rights if they are needed. – Majavah talk · edits 08:39, 6 July 2020 (UTC)[reply]
  • Support --94rain Talk 10:28, 6 July 2020 (UTC)[reply]
  • I understand the security benefits and on that basis I'm generally in favor, but I think "activity" should measure actions in more MediaWiki technical spaces, specifically Gerrit and Phabricator. I also think those who are active using other accounts (e.g. had sysop on volunteer account, now primarily edits using a (WMF) one) shouldn't lose their rights on the basis that the person behind it is still active. Even with those two additional requirements, I expect we'd still be removing a significant amount of the above table for people who are actually inactive. Legoktm (talk) 23:08, 7 July 2020 (UTC)[reply]
    I mostly disagree on expanding the activity scope, because having or lacking advanced permissions on mediawiki.org has no bearing on what you are or are not able to do on other technical spaces such as Phabricator or Gerrit. If you have literally never edited mediawiki.org for 2 years, you clearly are not using your advanced permissions here, so in my opinion I see very little reason why they need to be kept. If at a future point you do start contributing to the wiki itself again and find yourself in need of advanced permissions, it should be a pretty trivial matter to get them back. I for one am inclined to very quickly approve requests to get back any access lost due to AAR/inactivity. --Skizzerz 00:31, 8 July 2020 (UTC)[reply]
    And as long as they're active in general and haven't disabled all notifications, they'll probably get the email/notification about a talkpage edit if they're notified there regardless of whether or not they're actually editing normally here, and can just pop by and reply 'nope I'm still here' and not have their rights removed regardless, right? And if they do have all notifications off/aren't checking them at all, well... there really probably wasn't much point in them keeping the rights, and they can request them back later if they change their mind... -— Isarra ༆ 16:09, 8 July 2020 (UTC)[reply]
    Being an administrator is more than just the technical rights it grants though. It's about being part of a community, a trusted member that is often looked up to and respected by others. While it may be good opsec to only have the rights you need, I don't think that's good community building. If we had a rash of admin account compromises (I believe mine was the last one :() or confusion in where users are going to inactive admins for help, I'd be more inclined to support this, but I don't think we have either of those problems in a significant way. While yes, it should be straightforward to get rights back, I've also seen people, including multiple members of this community, express unhappiness about not having rights they should've had, whether it was by accident or intentional. Then we also have what's happening on the English Wikipedia lately, in which when administrators come back and ask for their rights again, they get interrogated by everyone to ascertain whether they "actually need" the rights or "are you sure it's really them?". I don't think this will happen here, but I don't think it's as easy as "it should be a pretty trivial matter to get them back". Legoktm (talk) 11:40, 9 July 2020 (UTC)[reply]
  • Support Ainz Ooal Gown (talk) 09:53, 15 July 2020 (UTC)[reply]
  • Support. [[Hasley]] 18:58, 15 July 2020 (UTC)[reply]
  • Support * Pppery * it has begun 02:50, 22 July 2020 (UTC)[reply]
  • Support. Looking at @Legoktm: 's concerns, do we really need to give every developer admin access, especially when the permissions under it are mainly irrelevant for development work? Leaderboard (talk) 11:51, 22 July 2020 (UTC)[reply]
  • This is better than creating ad-hoc procedures here (which will anyway require Stewards intervention). Ammarpad (talk) 06:08, 3 August 2020 (UTC)[reply]
  • Support. As someone listed in the table, it seems to me that piggybacking on an existing process is the reasonable thing to do. Titoxd(?!?) 20:23, 3 August 2020 (UTC)[reply]
  •  Comment: This has been open for over a month, with no new contributions in the last week. Can it be closed? If the closer assesses that there is consensus in favor of using AAR, please update m:Admin activity review/Local inactivity policies and leave a note at m:Stewards' noticeboard. Thanks, --DannyS712 (talk) 00:45, 11 August 2020 (UTC)[reply]
    • Yes Closing as successful Since it seems like nobody else is chiming in (been a few more weeks after DannyS712's comment), I went ahead and made the changes on those pages on meta. --Skizzerz 17:32, 25 August 2020 (UTC)[reply]
Retrieved from "https://www.mediawiki.org/w/index.php?title=Project:Requests_for_permissions/RfC/Removal_of_inactive_bureaucrats_and_interface_admins&oldid=6457985"