[00:12:57] swtaarrs: do you know much about mcrouter? [00:19:30] McRouter [00:19:36] Made by McDonalds [00:22:23] <^lurker> You don't want to know how it's made. [00:45:35] AaronSchulz: I know that it's a thing we use [00:45:39] and it talks to memcache [00:45:42] that's about it, sorry [00:45:52] if you have a more specific question I might know a little more :) [01:48:04] <_joe_> AaronSchulz: are you thinking of cross-DC memcached replication? [02:17:43] bd808|BUFFER: https://www.mediawiki.org/wiki/User:RobLa/RESTbase_authz_cases [02:18:15] legoktm: now embellish ^ :-) [06:30:26] hi TimStarling [14:02:16] legoktm, robla: wiki --> public; page --> private ? [14:02:24] I'm not sure we really support that. [16:49:25] Fiona: we "support" it in the sense that there are extensions that allow for it through hooks [16:56:54] 3Librarization, MediaWiki-Core-Team: Move code in includes/utils/StringUtils.php to libs (remove dependence upon MediaWiki) - https://phabricator.wikimedia.org/T87863#1000972 (10Legoktm) 3NEW a:3Legoktm [17:02:54] 3Librarization, MediaWiki-Core-Team: Move code in includes/utils/StringUtils.php to libs (remove dependence on MediaWiki) - https://phabricator.wikimedia.org/T87863#1000983 (10ori) [18:39:39] 3Librarization, MediaWiki-Core-Team: Move code in includes/utils/StringUtils.php to libs (remove dependence on MediaWiki) - https://phabricator.wikimedia.org/T87863#1001205 (10Legoktm) p:5Triage>3Normal [18:39:45] 3Librarization, MediaWiki-Core-Team: Composer autoloader is slow - https://phabricator.wikimedia.org/T85182#1001207 (10Legoktm) p:5Triage>3High [18:42:22] bd808: What was the specification on that authz API module? Input is title and action => output is "allowed" or "denied"? [19:24:10] anomie: I think that was part of the discussion. Let me see if I can find a better doc [19:25:34] anomie: https://www.mediawiki.org/wiki/Talk:Requests_for_comment/Service-oriented_architecture_authentication#RESTBase_use_cases (in: array of permisisons; out: array of bools) [19:27:14] bd808: They can do that already by fetching meta=userinfo&uiprop=rights and then comparing the arrays. I thought discussion had gotten around to something more interesting. [19:28:07] Gabriel kept saying something like 'check userCan()' as I recall [19:28:10] gwicke said permissions, but it sounded like he meant action.. [19:28:34] Yeah, userCan takes an action [19:29:52] the MVP (feel dirty typing that) case was read/write private wiki + read revdel correct? [19:30:28] * bd808 may start speaking corporate gibberish more and more as a product manager [19:32:32] We need to promote synergy between verticals by encouraging rapid prototyping with a goal of converging on disruptive solution in the marketplace [19:32:59] * anomie 's eyes went crossed looking at that [19:33:19] "check userCan()" was my recollection too [19:39:10] anomie: the sad part is, it's grammatically correct and logically sound (in an absolute sense) [19:39:29] legoktm: is there an extension I can look at to see how extension config vars are supposed to be implemented nowadays? [19:46:11] ori: GlobalUserPage or TextExtracts are good examples [19:48:48] ori: also see https://www.mediawiki.org/wiki/Manual:Configuration_for_developers [19:52:14] anomie: Did you happen to make a phabricator task for the auth api endpoints? [19:52:40] bd808: No. I probably should do that, unless you want to. [19:52:54] * bd808 delegates :) [19:53:17] * anomie looks for people to go to lunch [19:53:35] topic just showed up on slide in svc review as "resolved" that we will be building it [19:53:50] so I guess we should track that :) [19:54:50] :) [19:59:54] can someone mute that fire engine? [20:00:19] <^d> Headphones? [20:00:34] for everone in R66? :) [20:00:37] +y [20:00:46] <^d> Sure! [20:01:20] As a remotie, I'd vote for all meeting attendees to be remote [20:02:07] bd808: +1 :) [20:02:22] just have everyone get a real desk/office, and attend all meetings from there [20:02:41] isolation pods to store the wetware in. [20:02:55] while we all plug into the matrix [20:03:12] seemed efficient in that 3 part sales video I watched [20:09:49] * ^d just wants his own office [20:09:53] <^d> Open floor plans suck [20:13:16] bd808: https://phabricator.wikimedia.org/T88010 [20:13:19] 3RESTBase, MediaWiki-API, MediaWiki-Core-Team: Action API modules to support Restbase - https://phabricator.wikimedia.org/T88010#1002213 (10Anomie) 3NEW a:3Anomie [20:14:21] anomie: thank you [20:16:38] 3RESTBase, MediaWiki-API, MediaWiki-Core-Team: Action API modules to support Restbase - https://phabricator.wikimedia.org/T88010#1002234 (10bd808) See also . [20:17:27] AaronSchulz: is the "SwiftCloudFiles" extension still used? [20:23:27] 3RESTBase, MediaWiki-API, MediaWiki-Core-Team: Action API modules to support Restbase - https://phabricator.wikimedia.org/T88010#1002246 (10Anomie) Token checking: ``` $ curl --silent 'http://localhost/w/api.php?format=json&action=checktoken&type=csrf&token=123ABC' | json_pp { "checktoken" : { "result"... [20:28:02] greg-g: your standing desk is better adjusted than Ori's. Good job :) [20:28:19] bd808: thanks :) [20:43:03] legoktm: no [20:45:46] AaronSchulz: ok, submitted https://gerrit.wikimedia.org/r/187478 then [23:24:45] bd808: ori: you guys held a party and didn't invite me? :-) [23:26:31] * robla just saw everyone comfortably huddled in R31 and is actually pretty relieved he isn't in that meeting [23:27:06] <^d> Ain't no party like an R31 party. [23:28:51] hiphopopotumus [23:29:05] legoktm: I'd argue we're doing actual support (not "support") of partial read restrictions if we're building it into other tools. [23:40:51] Fiona: well, we do support it in core with stuff like Title::userCan() except if an extension didn't respect that we wouldn't consider it a security vulnerability. [23:48:33] robla: no managers. This is a meeting for pigs not chickens :) [23:51:56] I looked up the topic because I was intrigued. Almost any of guys could probably write a roblabot to say what I would say so I'm probably redundant :-)