Global group management

Global rights log

05:52, 31 January 2023 Agent (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added ipinfo, ipinfo-view-full; removed oathauth-disable-for-user, oathauth-verify-user, centralauth-lock, centralauth-rename, globalblock, handle-pii (Remove rights from global Trust and Safety group which exist in local Meta group, as previously agreed and temporarily reverted. +IPInfo rights)
20:52, 17 May 2022 Owen (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added mwoauthmanageconsumer; removed (none) (+OAuth for TSPortal)
00:11, 25 April 2022 Doug (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added oathauth-disable-for-user, oathauth-verify-user, handle-pii, centralauth-rename, globalblock; removed (none) (Temporarily revert SRE this log action as it was defined as a passive threat and a Trust and Safety team member was active at the time, which Reception123 admitted could've been better handled, but secondarily, this appears to be a ManageWiki/CreateWiki cache issue whereby these rights were not made local. Trust and Safety will rem...)
23:02, 24 April 2022 Doug (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added (none); removed userrights (Done)
23:01, 24 April 2022 Doug (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added userrights; removed (none) (Trust and Safety—Terms of Use enforcement investigation)
07:15, 20 April 2022 Reception123 talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added (none); removed oathauth-disable-for-user, oathauth-verify-user, handle-pii, centralauth-rename, globalblock (remove rights now added to local group)
11:54, 16 April 2022 Owen (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added (none); removed userrights, userrights-interwiki, globalgrouppermissions, globalgroupmembership (Local group supersedes)
16:21, 20 September 2021 Owen (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added mwoauthproposeconsumer, mwoauthupdateownconsumer; removed (none) (+OAuth for TSPortal)
19:54, 6 August 2021 Owen (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added generate-random-hash, handle-pii; removed (none) (RemovePII extension)
14:56, 3 May 2021 Owen (Miraheze) talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added autoconfirmed, autopatrol, bigdelete, block, blockemail, browsearchive, createpage, createtalk, delete, deletedhistory, deletedtext, deletelogentry, deleterevision, edit, editinterface, editprotected, editmyoptions, editmyprivateinfo, editsemiprotected, editsitecss, editsitejson, editsitejs, ipblock-exempt, move, movefile, move-categorypages, move-rootuserpages, move-subpages, noratelimit, patrolmarks, protect, read, reupload, rollback, unblockself, undelete, userrights, userrights-interwiki, viewmyprivateinfo, writeapi, abusefilter-view, abusefilter-log, abusefilter-view-private, abusefilter-log-private, override-antispoof, skipcaptcha, globalblock, globalblock-exempt, viewglobalprivatefiles, managewiki, managewiki-restricted, nuke, oathauth-enable, oathauth-api-all, oathauth-disable-for-user, oathauth-verify-user, oathauth-view-log, renameuser, torunblocked, centralauth-lock, centralauth-rename; removed (none) (Reasonable standard user rights as approved by Director of Trust and Safety)
13:57, 26 April 2021 Owen talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added globalgroupmembership; removed (none) (Necessary for management of group membership)
13:49, 26 April 2021 Owen talk contribs changed global group permissions for Special:GlobalUsers/trustandsafety: added tboverride; removed (none) (Necessary for creation of official accounts)
13:47, 26 April 2021 Reception123 talk contribs renamed group Special:GlobalGroupPermissions/Trust and Safety to Special:GlobalGroupPermissions/trustandsafety (change name, using localised name)

Name of group:	trustandsafety
Localised name of group:	Trust and Safety
Localised name of group members:	Trust and Safety
Member list:	List of users with Trust and Safety rights
Set of wikis where this group is active:	None, applies to all wikis.
Assigned permissions:	View hidden abuse log entries `(abusefilter-hidden-log)` Hide entries in the abuse log `(abusefilter-hide-log)` View the abuse log `(abusefilter-log)` View detailed abuse log entries `(abusefilter-log-detail)` View log entries of abuse filters marked as private `(abusefilter-log-private)` Create or modify abuse filters `(abusefilter-modify)` Create or modify global abuse filters `(abusefilter-modify-global)` Modify abuse filters with restricted actions `(abusefilter-modify-restricted)` View private data in the abuse log `(abusefilter-privatedetails)` View the AbuseFilter private details access log `(abusefilter-privatedetails-log)` Revert all changes by a given abuse filter `(abusefilter-revert)` View abuse filters `(abusefilter-view)` View abuse filters marked as private `(abusefilter-view-private)` Use higher limits in API queries `(apihighlimits)` Apply tags along with one's changes `(applychangetags)` Not be affected by IP-based rate limits `(autoconfirmed)` Automatically log in with an external user account `(autocreateaccount)` Have one's own edits automatically marked as patrolled `(autopatrol)` autopatrolled `(autopatrolled)` Delete pages with large histories `(bigdelete)` Block other users from editing `(block)` Block a user from sending email `(blockemail)` Be treated as an automated process `(bot)` Search deleted pages `(browsearchive)` Forcibly create a local account for a global account `(centralauth-createlocal)` Lock or unlock global account `(centralauth-lock)` Merge their account `(centralauth-merge)` Rename global accounts `(centralauth-rename)` Suppress or hide global account `(centralauth-suppress)` Unmerge global account `(centralauth-unmerge)` Manage central notices `(centralnotice-admin)` Add and remove arbitrary tags on individual revisions and log entries `(changetags)` Check users' IP addresses and other information `(checkuser)` View the checkuser log `(checkuser-log)` Create new user accounts `(createaccount)` Create pages (which are not discussion pages) `(createpage)` Create discussion pages `(createtalk)` Create wikis `(createwiki)` Delete pages `(delete)` Delete Dumps `(delete-dump)` Delete single revision redirects `(delete-redirect)` Delete tags from the database `(deletechangetags)` View deleted history entries, without their associated text `(deletedhistory)` View deleted text and changes between deleted revisions `(deletedtext)` Delete and undelete specific log entries `(deletelogentry)` Delete and undelete specific revisions of pages `(deleterevision)` Edit pages `(edit)` Edit the content model of a page `(editcontentmodel)` Edit incident reports `(editincidents)` Edit the user interface `(editinterface)` Edit your own preferences `(editmyoptions)` Edit your own private data (e.g. email address, real name) `(editmyprivateinfo)` Edit your own user CSS files `(editmyusercss)` Edit your own user JavaScript files `(editmyuserjs)` Edit your own user JSON files `(editmyuserjson)` Edit your own user JavaScript files that are redirects `(editmyuserjsredirect)` Edit your own watchlist (note that some actions will still add pages even without this right) `(editmywatchlist)` Update other users' social profiles `(editothersprofiles)` View and update private information (email address) in other users' social profiles `(editothersprofiles-private)` Edit pages protected as "Allow only administrators" `(editprotected)` Edit pages protected as "Allow only autoconfirmed users" `(editsemiprotected)` Edit sitewide CSS `(editsitecss)` Edit sitewide JavaScript `(editsitejs)` Edit sitewide JSON `(editsitejson)` Edit other users' CSS files `(editusercss)` Edit other users' JavaScript files `(edituserjs)` Edit other users' JSON files `(edituserjson)` Create Structured Discussions boards in any location `(flow-create-board)` Delete Structured Discussions topics and posts `(flow-delete)` Edit Structured Discussions posts by other users `(flow-edit-post)` Hide Structured Discussions topics and posts `(flow-hide)` Mark Structured Discussions topics as resolved `(flow-lock)` Suppress Structured Discussions topics and posts `(flow-suppress)` Edit gadget definitions `(gadgets-definition-edit)` Edit gadget JavaScript and CSS pages `(gadgets-edit)` Generate Dumps `(generate-dump)` Generate random username hashes `(generate-random-hash)` Make and remove global blocks `(globalblock)` Bypass global blocks `(globalblock-exempt)` Disable global blocks locally `(globalblock-whitelist)` Edit membership to global groups `(globalgroupmembership)` Manage global groups `(globalgrouppermissions)` Handle import dump interwiki `(handle-import-dump-interwiki)` Handle user import dump requests `(handle-import-dump-requests)` Handle/remove personal identifiable information `(handle-pii)` Block a username, hiding it from the public `(hideuser)` Import pages from other wikis `(import)` Import pages from a file upload `(importupload)` Edit interwiki data `(interwiki)` Bypass IP blocks, auto-blocks and range blocks `(ipblock-exempt)` Retrieve information about IP addresses attached to revisions or log entries `(ipinfo)` Access a basic view of the IP information attached to revisions or log entries `(ipinfo-view-basic)` Access a full view of the IP information attached to revisions or log entries `(ipinfo-view-full)` View a log of who has accessed IP information `(ipinfo-view-log)` Manage all push subscriptions `(manage-all-push-subscriptions)` Create and (de)activate tags `(managechangetags)` Manage wiki settings `(managewiki)` Manage default group permissions `(managewiki-editdefault)` Manage restricted wiki settings `(managewiki-restricted)` Mark rolled-back edits as bot edits `(markbotedits)` Send a message to multiple users at once `(massmessage)` Merge the history of pages `(mergehistory)` Mark edits as minor `(minoredit)` Moderate edits `(moderation)` Move pages `(move)` Move category pages `(move-categorypages)` Move root user pages `(move-rootuserpages)` Move pages with their subpages `(move-subpages)` Move files `(movefile)` Manage OAuth consumers `(mwoauthmanageconsumer)` Manage OAuth grants `(mwoauthmanagemygrants)` Propose new OAuth consumers `(mwoauthproposeconsumer)` Suppress OAuth consumers `(mwoauthsuppress)` Update OAuth consumers you control `(mwoauthupdateownconsumer)` View private OAuth data `(mwoauthviewprivate)` View suppressed OAuth consumers `(mwoauthviewsuppressed)` Not be tracked via Matomo `(noanalytics)` Not have minor edits to discussion pages trigger the new messages prompt `(nominornewtalk)` Not be affected by rate limits `(noratelimit)` Mass delete pages `(nuke)` Query and validate OATH information for self and others `(oathauth-api-all)` Disable two-factor authentication for a user `(oathauth-disable-for-user)` Enable two-factor authentication `(oathauth-enable)` Verify whether a user has two-factor authentication enabled `(oathauth-verify-user)` Access to log of two-factor authentication changes `(oathauth-view-log)` Override the spoofing checks `(override-antispoof)` Export pages including linked pages up to a depth of 5 `(override-export-depth)` Change page language `(pagelang)` Mark versions of pages for translation `(pagetranslation)` Mark others' edits as patrolled `(patrol)` View recent changes patrol marks `(patrolmarks)` Change protection settings and edit cascade-protected pages `(protect)` Limit actions that can be performed for some groups for a limited time `(protectsite)` Purge the cache for a page `(purge)` Read pages `(read)` Rename users `(renameuser)` Request import dumps `(request-import-dump)` Request wikis `(requestwiki)` Overwrite existing files `(reupload)` Overwrite existing files uploaded by oneself `(reupload-own)` Override files on the shared media repository locally `(reupload-shared)` Quickly rollback the edits of the last user who edited a particular page `(rollback)` Bypass the spam block list `(sboverride)` Send email to other users `(sendemail)` Bypass IP blocks issued by the StopForumSpam extension `(sfsblock-bypass)` Lock and unlock the database `(siteadmin)` Perform CAPTCHA-triggering actions without having to go through the CAPTCHA `(skipcaptcha)` View the spam block list log `(spamblacklistlog)` View private logs `(suppressionlog)` Not create redirects from source pages when moving pages `(suppressredirect)` View, hide and unhide specific revisions of pages from any user `(suppressrevision)` Override the disallowed titles or usernames list `(tboverride)` Override the disallowed usernames list `(tboverride-account)` Use Cosmos ThemeDesigner `(themedesigner)` View disallowed title list log `(titleblacklistlog)` Bypass automatic blocks of Tor exit nodes `(torunblocked)` Edit using the translate interface `(translate)` Change workflow state of message groups `(translate-groupreview)` Import offline translations `(translate-import)` Manage message groups `(translate-manage)` Review translations `(translate-messagereview)` Unblock oneself `(unblockself)` Undelete a page `(undelete)` View a list of unwatched pages `(unwatchedpages)` Upload files `(upload)` Upload files from a URL `(upload_by_url)` Create short URLs `(urlshortener-create-url)` Manage short URLs `(urlshortener-manage-url)` View short URLs management log `(urlshortener-view-log)` Edit all user rights `(userrights)` Edit user rights of users on other wikis `(userrights-interwiki)` View Dumps `(view-dump)` View private import dump requests `(view-private-import-dump-requests)` View global files filtered from private wikis `(viewglobalprivatefiles)` View incident reports `(viewincidents)` View your own private data (e.g. email address, real name) `(viewmyprivateinfo)` View your own watchlist `(viewmywatchlist)` View revisions hidden from any user `(viewsuppressed)` Use of the write API `(writeapi)`