Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Page MenuHomePhabricator

Global blocks should apply to password reset
Closed, ResolvedPublic2 Estimated Story Points

Description

Background

Password reset currently checks separately for global blocks, but global blocks don't actually apply to password reset, as explained in T317334.

However, password reset should be blocked by global blocks, as reasoned in this comment: T317334#8223449.

We can do this by ensuring GlobalBlock::appliesToPasswordReset returns true.

Acceptance criteria

Attempting to reset password while globally blocked results in a blocked error.

Notes

This task can be done straight away, and is not blocked on T317334: Remove separate checks for global blocks from PasswordReset.

Event Timeline

Tchanders set the point value for this task to 2.Sep 13 2022, 1:36 PM

Change 837679 had a related patch set uploaded (by AGueyte; author: AGueyte):

[mediawiki/extensions/GlobalBlocking@master] Global blocks applies to password reset

https://gerrit.wikimedia.org/r/837679

Change 837679 merged by jenkins-bot:

[mediawiki/extensions/GlobalBlocking@master] Override GlobalBlock::appliesToPasswordReset to return true

https://gerrit.wikimedia.org/r/837679