Wikidata:Requests for comment/Defining account creators
An editor has requested the community to provide input on "Defining account creators" via the Requests for comment (RFC) process. This is the discussion page regarding the issue.
If you have an opinion regarding this issue, feel free to comment below. Thank you! |
THIS RFC IS CLOSED. Please do NOT vote nor add comments.
- The following discussion is closed. Please do not modify it. Subsequent comments should be made in a new section. A summary of the conclusions reached follows.
consensus has reached that
- bureaucrats are allowed to grant/remove account creator flags
- account creater flags should be granted for outreach/editathon events where accounts may need to be created en masse
- account creater flags do not have to be removed after the outreach/editathon event has ended.--Pasleim (talk) 19:37, 23 January 2018 (UTC)[reply]
From Wikidata:Account creators:
The account creator user right grants access to a tool which permits trusted Wikidata contributors to make a large number of accounts for other people who request them.
This number does not include administrators, who all have the account creator user right by default.
- Account creators' abilities
Accounts with the account creator user right have the technical ability to perform the following actions:
- Create more than six accounts in a 24-hour period.
- Override the "anti-spoof" check and create accounts that are similar to accounts that already exist (the
'override-antispoof'
flag). - Override the "blacklist" check and create accounts that are otherwise blocked by the title blacklist (the '
tboverride-account
' flag).
Following this request, I believe that we should revisit how we handle this.
Contents
Allow bureaucrats to grant/remove account creator
[edit]- Support We're a big enough community to handle this appropriately, I believe. --Rschen7754 04:58, 23 October 2017 (UTC)[reply]
- Support The project is large enough to handle this permission locally. —Alvaro Molina (✉ - ✔) 02:04, 25 October 2017 (UTC)[reply]
- Support seems reasonable, and we have a strong enough community to handle this. Andrew Gray (talk) 11:28, 26 October 2017 (UTC)[reply]
- Support Agreed with the previous opinions. Pamputt (talk) 07:25, 28 October 2017 (UTC)[reply]
- Support ChristianKl (talk) 17:59, 29 October 2017 (UTC)[reply]
- Support At 5 🕔 (five) years old Wikidata has accumulated a large enough userbase to make their own decisions. -- 徵國單 (討論 🀄) (方孔錢 💴) 09:53, 2 November 2017 (UTC)[reply]
- Support Mahir256 (talk) 07:15, 10 November 2017 (UTC)[reply]
- Support The project is large enough to deal with requests related to this permission --Alaa :)..! 19:00, 21 November 2017 (UTC)[reply]
- Support --DangSunM (talk) 04:38, 22 November 2017 (UTC)[reply]
- Support --Jklamo (talk) 21:57, 21 January 2018 (UTC)[reply]
Allow bureaucrats and admins to grant/remove account creator
[edit]- Neutral only because bureaucrats granting it should be enough. --Rschen7754 04:58, 23 October 2017 (UTC)[reply]
- Neutral Per Rschen7754. —Alvaro Molina (✉ - ✔) 02:05, 25 October 2017 (UTC)[reply]
- Support I don't think bureaucrat is necessary privilege for granting rights any more. --Liuxinyu970226 (talk) 11:20, 11 November 2017 (UTC)[reply]
- Support per Liuxinyu970226 ChristianKl (✉) 01:03, 13 December 2017 (UTC)[reply]
Status quo (only stewards can grant/remove account creator
[edit]For outreach/editathon events where accounts may need to be created en masse
[edit]- Support Rschen7754 06:11, 25 October 2017 (UTC)[reply]
- Support This is definitely the most pressing case. Andrew Gray (talk) 11:28, 26 October 2017 (UTC)[reply]
- Support Pamputt (talk) 07:25, 28 October 2017 (UTC)[reply]
- Support ChristianKl (talk) 17:59, 29 October 2017 (UTC)[reply]
- Support -- 徵國單 (討論 🀄) (方孔錢 💴) 09:54, 2 November 2017 (UTC)[reply]
- Support --Alaa :)..! 19:01, 21 November 2017 (UTC)[reply]
- Support --DangSunM (talk) 04:38, 22 November 2017 (UTC)[reply]
- Support --Jklamo (talk) 21:58, 21 January 2018 (UTC)[reply]
When the outreach/editathon event for which it was granted ends the flag should be removed
[edit]- Oppose ChristianKl (talk) 09:44, 31 October 2017 (UTC)[reply]
- Support removing the flag after the event ends. (Do you want people to maintain the account creator flag indefinitely, @ChristianKl:? Just want to clarify this.) Mahir256 (talk) 07:17, 10 November 2017 (UTC)[reply]
- It reduces the amount of burocracy if a person who runs edithons doesn't have to make a request for the flag for every event. ChristianKl (talk) 13:42, 10 November 2017 (UTC)[reply]
- Oppose same as ChristianKl. If someone needs to be account creator once, it could need to use it later. Extra process is not needed and is purely bureaucratic. Pamputt (talk) 06:55, 13 December 2017 (UTC)[reply]
- Oppose; it seems simplest just to leave the flag in place. People who need it are reasonably likely to need it again and if we trust them enough not to abuse it for two weeks, then we probably trust them not to abuse it indefinitely. Andrew Gray (talk) 12:17, 13 December 2017 (UTC)[reply]
I have this right on en.Wikipedia (and on Wikispecies, where I'm an admin), because I regularly run editathons and training events. It's invaluable; not because I use it often, but because on the rare occasions I need it, I know it's there and can make use of it without delay. In that way it has saved more than one such event from failure.
That said, best practice is to ask attendees to create an account in advance of the event, where possible. Of course we don't always know who they will be, until the event itself.
Any editor in good standing who requests this right for an event should be granted it for a limited period; and anyone who can demonstrate that they regularly run relevant events should be given it indefinitely (with, say, an annual review to check that they are still active).
The Phabricator ticket requesting "The Event Organiser's Userright" is also relevant. Andy Mabbett (Pigsonthewing); Talk to Andy; Andy's edits 08:48, 22 October 2017 (UTC)[reply]
- I'm not sure I understand the consequences of this right well. To what extend does it effect other Wikimedia projects when we give out this right relatively freely? ChristianKl (talk) 12:10, 22 October 2017 (UTC)[reply]
- It could mean that if a vandal gets it, they could create a ton of sock accounts to use later from the same IP. --Rschen7754 04:57, 23 October 2017 (UTC)[reply]
- Hence the use of "in good standing" in my post above. Andy Mabbett (Pigsonthewing); Talk to Andy; Andy's edits 09:30, 25 October 2017 (UTC)[reply]
- Is there a way to ban those sock accounts later in bulk? Are those accounts independent from Wikidata (can they also be used to edit Wikipedia)? ChristianKl (talk) 14:55, 25 October 2017 (UTC)[reply]
- It can be done, but it would be preferable to not have the disruption in the first place. Those accounts could edit any publicly editable WMF site. --Rschen7754 18:44, 25 October 2017 (UTC)[reply]
- It could mean that if a vandal gets it, they could create a ton of sock accounts to use later from the same IP. --Rschen7754 04:57, 23 October 2017 (UTC)[reply]
- I'd like to hear some examples where the need for this has come up. The statement above mentions three specific abilities this right gives. Do we have examples where we have had a need for one person to create multiple accounts the same day? Why does it not work for each person at an event to independently create their own account? Or do we have examples where the blacklist etc rules have been a burden? ArthurPSmith (talk) 08:49, 26 October 2017 (UTC)[reply]
- I encountered this several times doing a series of Wikipedia outreach events in 2012-13, and on an occasional basis since then - I haven't encountered it with Wikidata-specific events yet, but I haven't run many WD-focused ones :-). It's not that there is generally a need for one person to create multiple accounts, but it's very easy to have more than six people wanting to create an account at an event, and as they tend to be using the same wireless network or same group of networked computers, then the account cap kicks in - since the blacklist can't distinguish between six different people or one person doing it six times. Getting them to create accounts in advance is ideal, but often not possible for various reasons, and IP-whitelisting is often also not possible. Having someone with account creator rights on hand has often been the only way we were able to get people set up. Andrew Gray (talk) 11:28, 26 October 2017 (UTC)[reply]
- We should decide whether when we grant the right to a person for an event the right will stay with the person after the event or whether we remove the right after the event is over. ChristianKl (talk) 18:00, 29 October 2017 (UTC)[reply]
- @분당선M, Donald Trung, Pamputt, Andrew Gray: @AlvaroMolina, Rschen7754, Liuxinyu970226: Can you add your opinion to the question of whether the flag should be removed after an event? ChristianKl (✉) 01:07, 13 December 2017 (UTC)[reply]