⚓ T420154 CVE-2026-5266: Notifications (Echo) API can be used by any OAuth tool
Page Menu
Phabricator
Create Task
Maniphest
T420154
CVE-2026-5266: Notifications (Echo) API can be used by any OAuth tool
Closed, Resolved
Public
Security
Actions
Edit Task
Edit Related Tasks...
Create Subtask
Edit Parent Tasks
Edit Subtasks
Merge Duplicates In
Close As Duplicate
Edit Related Objects...
Edit Commits
Edit Mocks
Mute Notifications
Protect as security issue
Assigned To
Urbanecm_WMF
Authored By
Legoktm
Mar 15 2026, 9:00 PM
2026-03-15 21:00:39 (UTC+0)
Tags
Security-Team
(Our Part Is Done)
Security
Notifications (Echo)
(Backlog)
SecTeam-Processed
(Completed)
MediaWiki-Platform-Team (Radar)
Growth-Team (FY2025-26 Q3 Sprint 6)
(Code Review)
MW-1.43-release
(Blocker)
MW-1.44-release
(Blocker)
MW-1.45-release
(Blocker)
MW-1.46-notes (1.46.0-wmf.22; 2026-03-31)
Patch-For-Review
Referenced Files
F74680570: T420154.patch
Tue, Mar 31, 12:42 PM
2026-03-31 12:42:19 (UTC+0)
F74664049: T420154.patch
Tue, Mar 31, 9:57 AM
2026-03-31 09:57:56 (UTC+0)
Subscribers
A_smart_kitten
Aklapper
Cyndymediawiksim
DMburugu
EMcFarland-WMF
Etonkovidova
gerritbot
View All 20 Subscribers
Description
While I was building
Tool-echo-chamber
I realized that there is no specific grant/userright needed to fetch a user's notifications. This means that any BotPassword or OAuth tool can access a user's notifications. I don't think that's intended given that notifications can contain some private info like email subject lines or thanks.
I think it would benefit from getting its own userright + grant, similar to how we have
viewmywatchlist
Details
Risk Rating
High
Author Affiliation
Wikimedia Communities
Related Changes in Gerrit:
Subject
Repo
Branch
Lines +/-
Create a new grant for the echo-read-notifications
mediawiki/extensions/Echo
REL1_45
+13
-0
Create a new grant for the echo-read-notifications
mediawiki/extensions/Echo
REL1_44
+13
-0
Create a new grant for the echo-read-notifications
mediawiki/extensions/Echo
REL1_43
+13
-0
ApiEchoPermissionsTrait: don't show $1 to user
mediawiki/extensions/Echo
REL1_43
+11
-1
ApiEchoPermissionsTrait: don't show $1 to user
mediawiki/extensions/Echo
REL1_45
+11
-1
ApiEchoPermissionsTrait: don't show $1 to user
mediawiki/extensions/Echo
REL1_44
+11
-1
Respect the echo-read-notifications right in user interface
mediawiki/extensions/Echo
REL1_43
+18
-14
Respect the echo-read-notifications right in user interface
mediawiki/extensions/Echo
REL1_44
+18
-14
Respect the echo-read-notifications right in user interface
mediawiki/extensions/Echo
REL1_45
+18
-14
refactor: Use a trait to check for reading permissions
mediawiki/extensions/Echo
REL1_44
+56
-27
refactor: Use a trait to check for reading permissions
mediawiki/extensions/Echo
REL1_43
+56
-27
refactor: Use a trait to check for reading permissions
mediawiki/extensions/Echo
REL1_45
+56
-27
[i18n] Correct the action message
mediawiki/extensions/Echo
REL1_44
+1
-1
[i18n] Correct the action message
mediawiki/extensions/Echo
REL1_45
+1
-1
[i18n] Correct the action message
mediawiki/extensions/Echo
REL1_43
+1
-1
Respect the echo-read-notifications right in user interface
mediawiki/extensions/Echo
wmf/1.46.0-wmf.22
+18
-14
ApiEchoPermissionsTrait: don't show $1 to user
mediawiki/extensions/Echo
master
+11
-1
Create a new grant for the echo-read-notifications
mediawiki/extensions/Echo
wmf/1.46.0-wmf.22
+13
-0
refactor: Use a trait to check for reading permissions
mediawiki/extensions/Echo
wmf/1.46.0-wmf.22
+56
-27
[i18n] Correct the action message
mediawiki/extensions/Echo
wmf/1.46.0-wmf.22
+1
-1
SECURITY: Protect ApiEchoNotifications with a new user right
mediawiki/extensions/Echo
wmf/1.46.0-wmf.22
+15
-3
Respect the echo-read-notifications right in user interface
mediawiki/extensions/Echo
master
+18
-14
Create a new grant for the echo-read-notifications
mediawiki/extensions/Echo
master
+13
-0
refactor: Use a trait to check for reading permissions
mediawiki/extensions/Echo
master
+56
-27
[i18n] Correct the action message
mediawiki/extensions/Echo
master
+1
-1
SECURITY: Protect ApiEchoNotifications with a new user right
mediawiki/extensions/Echo
REL1_44
+15
-3
SECURITY: Protect ApiEchoNotifications with a new user right
mediawiki/extensions/Echo
REL1_43
+15
-3
SECURITY: Protect ApiEchoNotifications with a new user right
mediawiki/extensions/Echo
REL1_45
+15
-3
SECURITY: Protect ApiEchoNotifications with a new user right
mediawiki/extensions/Echo
master
+15
-3
Show related patches
Customize query in gerrit
Related Objects
Search...
Task Graph
Mentions
Status
Subtype
Assigned
Task
Restricted Task
Restricted Task
Resolved
BUG REPORT
Urbanecm_WMF
T421991
Notifications API is returning a permissions error since 2026-04-01 for a bot account
Resolved
BUG REPORT
matmarex
T422297
Echo fails to fetch notifications for temporary accounts
Resolved
Security
Urbanecm_WMF
T420154
CVE-2026-5266: Notifications (Echo) API can be used by any OAuth tool
Mentioned In
T422867: Add sortable headers for Related Changes in Gerrit
R2494:d83be52ab966: Reenable notifications with new OAuth consumer
T422297: Echo fails to fetch notifications for temporary accounts
T422318: Echo Chamber API error: You don't have permission
T422218: Marking cross-wiki notifications as read doesn't work
T421991: Notifications API is returning a permissions error since 2026-04-01 for a bot account
R2494:eb7875d76ba7: Temporarily disable notifications feature
Mentioned Here
T421991: Notifications API is returning a permissions error since 2026-04-01 for a bot account
T422297: Echo fails to fetch notifications for temporary accounts
Event Timeline
There are a very large number of changes, so older changes are hidden.
Show Older Changes
gerritbot
added a comment.
Tue, Mar 31, 11:42 PM
2026-03-31 23:42:02 (UTC+0)
Comment Actions
Change #1265621
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_44] SECURITY: Protect ApiEchoNotifications with a new user right
gerritbot
added a comment.
Wed, Apr 1, 2:47 PM
2026-04-01 14:47:21 (UTC+0)
Comment Actions
Change #1266286 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@master] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Wed, Apr 1, 2:55 PM
2026-04-01 14:55:39 (UTC+0)
Comment Actions
Change #1266289 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@master] [i18n] Correct the action message
gerritbot
added a comment.
Wed, Apr 1, 3:20 PM
2026-04-01 15:20:49 (UTC+0)
Comment Actions
Change #1266289
merged
by jenkins-bot:
[mediawiki/extensions/Echo@master] [i18n] Correct the action message
gerritbot
added a comment.
Wed, Apr 1, 3:22 PM
2026-04-01 15:22:23 (UTC+0)
Comment Actions
Change #1266296 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@master] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Wed, Apr 1, 3:30 PM
2026-04-01 15:30:38 (UTC+0)
Comment Actions
Change #1266300 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@master] feat: Respect the echo-read-notifications right in SpecialNotifications
gerritbot
added a comment.
Wed, Apr 1, 4:07 PM
2026-04-01 16:07:08 (UTC+0)
Comment Actions
Change #1266296
merged
by jenkins-bot:
[mediawiki/extensions/Echo@master] refactor: Use a trait to check for reading permissions
KStoller-WMF
added a comment.
Wed, Apr 1, 4:08 PM
2026-04-01 16:08:54 (UTC+0)
Comment Actions
@Trizek-WMF
- Can you take a look at this and decide if this needs to be added to tech news?
Urbanecm_WMF
added a comment.
Wed, Apr 1, 4:17 PM
2026-04-01 16:17:29 (UTC+0)
Comment Actions
In
T420154#11778975
@KStoller-WMF
wrote:
@Trizek-WMF
- Can you take a look at this and decide if this needs to be added to tech news?
Impact: Tools like
Tool-echo-chamber
are currently unable to read notifications (they'll need to request access to the "View my notifications" grant, which will be available once the pending patches merge).
Urbanecm_WMF
moved this task from
Incoming
to
Doing
on the
Growth-Team (FY2025-26 Q3 Sprint 6)
board.
Wed, Apr 1, 4:58 PM
2026-04-01 16:58:45 (UTC+0)
Urbanecm_WMF
moved this task from
Doing
to
Code Review
on the
Growth-Team (FY2025-26 Q3 Sprint 6)
board.
Wed, Apr 1, 5:14 PM
2026-04-01 17:14:04 (UTC+0)
Comment Actions
All should be in code review and mergeable now.
Urbanecm_WMF
added a subscriber:
Maintenance_bot
Thu, Apr 2, 8:04 AM
2026-04-02 08:04:41 (UTC+0)
Trizek-WMF
added a comment.
Thu, Apr 2, 2:31 PM
2026-04-02 14:31:18 (UTC+0)
Comment Actions
In
T420154#11779020
@Urbanecm_WMF
wrote:
In
T420154#11778975
@KStoller-WMF
wrote:
@Trizek-WMF
- Can you take a look at this and decide if this needs to be added to tech news?
Impact: Tools like
Tool-echo-chamber
are currently unable to read notifications (they'll need to request access to the "View my notifications" grant, which will be available once the pending patches merge).
What is the visible consequence for users, before and after the merge?
Legoktm
added a comment.
Thu, Apr 2, 2:37 PM
2026-04-02 14:37:02 (UTC+0)
Comment Actions
I don't think it needs a tech news announcement personally, mediawiki-api-announce would be more appropriate.
Trizek-WMF
added a comment.
Thu, Apr 2, 3:14 PM
2026-04-02 15:14:38 (UTC+0)
Comment Actions
If it only impacts tech audiences, in particular specialized ones, then yes, mediawiki-api-announce is a better option.
Urbanecm_WMF
added a comment.
Fri, Apr 3, 10:20 AM
2026-04-03 10:20:01 (UTC+0)
Comment Actions
In
T420154#11782718
@Trizek-WMF
wrote:
What is the visible consequence for users, before and after the merge?
Community-developped tools that need access to user notification are not working at the moment (the maintainer needs to request access to notifications to be able to retrieve them). Happy to write a mediawiki-api-announce message if it sounds like a better idea.
LucasWerkmeister
mentioned this in
R2494:eb7875d76ba7: Temporarily disable notifications feature
Fri, Apr 3, 11:53 AM
2026-04-03 11:53:34 (UTC+0)
matmarex
added a parent task:
T421991: Notifications API is returning a permissions error since 2026-04-01 for a bot account
Fri, Apr 3, 4:57 PM
2026-04-03 16:57:46 (UTC+0)
gerritbot
added a comment.
Fri, Apr 3, 5:53 PM
2026-04-03 17:53:04 (UTC+0)
Comment Actions
Change #1266286
merged
by jenkins-bot:
[mediawiki/extensions/Echo@master] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Fri, Apr 3, 5:55 PM
2026-04-03 17:55:39 (UTC+0)
Comment Actions
Change #1266300
merged
by jenkins-bot:
[mediawiki/extensions/Echo@master] Respect the echo-read-notifications right in user interface
Maintenance_bot
removed a project:
Patch-For-Review
Fri, Apr 3, 6:31 PM
2026-04-03 18:31:35 (UTC+0)
Johannnes89
subscribed.
Sat, Apr 4, 6:21 PM
2026-04-04 18:21:56 (UTC+0)
Comment Actions
T422297#11787684
suggested that changes in this task might be responsible for
T422297: Echo fails to fetch notifications for temporary accounts
matmarex
added a parent task:
T422297: Echo fails to fetch notifications for temporary accounts
Sun, Apr 5, 12:54 AM
2026-04-05 00:54:23 (UTC+0)
matmarex
mentioned this in
T421991: Notifications API is returning a permissions error since 2026-04-01 for a bot account
Sun, Apr 5, 12:57 AM
2026-04-05 00:57:47 (UTC+0)
Comment Actions
I think this can be made public now?
@Reedy
@sbassett
matmarex
mentioned this in
T422218: Marking cross-wiki notifications as read doesn't work
Sun, Apr 5, 1:07 AM
2026-04-05 01:07:14 (UTC+0)
Johannnes89
mentioned this in
T422318: Echo Chamber API error: You don't have permission
Sun, Apr 5, 10:01 AM
2026-04-05 10:01:36 (UTC+0)
Novem_Linguae
subscribed.
Sun, Apr 5, 8:45 PM
2026-04-05 20:45:44 (UTC+0)
gerritbot
added a comment.
Sun, Apr 5, 9:37 PM
2026-04-05 21:37:40 (UTC+0)
Comment Actions
Change #1268099 had a related patch set uploaded (by Novem Linguae; author: Novem Linguae):
[mediawiki/extensions/Echo@master] ApiEchoPermissionsTrait: don't show $1 to user
gerritbot
added a project:
Patch-For-Review
Sun, Apr 5, 9:37 PM
2026-04-05 21:37:44 (UTC+0)
gerritbot
added a comment.
Mon, Apr 6, 8:39 AM
2026-04-06 08:39:01 (UTC+0)
Comment Actions
Change #1268196 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] SECURITY: Protect ApiEchoNotifications with a new user right
gerritbot
added a comment.
Mon, Apr 6, 8:40 AM
2026-04-06 08:40:38 (UTC+0)
Comment Actions
Change #1268197 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] [i18n] Correct the action message
gerritbot
added a comment.
Mon, Apr 6, 8:40 AM
2026-04-06 08:40:47 (UTC+0)
Comment Actions
Change #1268198 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Mon, Apr 6, 8:40 AM
2026-04-06 08:40:56 (UTC+0)
Comment Actions
Change #1268199 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Mon, Apr 6, 8:53 AM
2026-04-06 08:53:47 (UTC+0)
Comment Actions
Change #1268196
merged
by jenkins-bot:
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] SECURITY: Protect ApiEchoNotifications with a new user right
gerritbot
added a comment.
Mon, Apr 6, 8:53 AM
2026-04-06 08:53:53 (UTC+0)
Comment Actions
Change #1268197
merged
by jenkins-bot:
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] [i18n] Correct the action message
gerritbot
added a comment.
Mon, Apr 6, 8:53 AM
2026-04-06 08:53:59 (UTC+0)
Comment Actions
Change #1268198
merged
by jenkins-bot:
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Mon, Apr 6, 8:54 AM
2026-04-06 08:54:04 (UTC+0)
Comment Actions
Change #1268199
merged
by jenkins-bot:
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Mon, Apr 6, 9:22 AM
2026-04-06 09:22:58 (UTC+0)
Comment Actions
Change #1268201 had a related patch set uploaded (by Urbanecm; author: Urbanecm):
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] Respect the echo-read-notifications right in user interface
Urbanecm_WMF
added a comment.
Mon, Apr 6, 9:33 AM
2026-04-06 09:33:57 (UTC+0)
Comment Actions
In
T420154#11787909
@matmarex
wrote:
I think this can be made public now?
@Reedy
@sbassett
No objections from my end.
sbassett
closed this task as
Resolved
Mon, Apr 6, 2:11 PM
2026-04-06 14:11:22 (UTC+0)
sbassett
changed Author Affiliation from N/A to Wikimedia Communities.
sbassett
removed a project:
Patch-For-Review
sbassett
changed the visibility from "
Custom Policy
" to "Public (No Login Required)".
sbassett
changed the edit policy from "
Custom Policy
" to "All Users".
sbassett
changed Risk Rating from N/A to High.
sbassett
moved this task from
Watching
to
Our Part Is Done
on the
Security-Team
board.
gerritbot
added a comment.
Mon, Apr 6, 3:30 PM
2026-04-06 15:30:03 (UTC+0)
Comment Actions
Change #1268099
merged
by jenkins-bot:
[mediawiki/extensions/Echo@master] ApiEchoPermissionsTrait: don't show $1 to user
ReleaseTaggerBot
added a project:
MW-1.46-notes (1.46.0-wmf.23; 2026-04-07)
Mon, Apr 6, 4:00 PM
2026-04-06 16:00:32 (UTC+0)
A_smart_kitten
subscribed.
Mon, Apr 6, 6:17 PM
2026-04-06 18:17:31 (UTC+0)
gerritbot
added a comment.
Mon, Apr 6, 8:43 PM
2026-04-06 20:43:28 (UTC+0)
Comment Actions
Change #1268201
merged
by jenkins-bot:
[mediawiki/extensions/Echo@wmf/1.46.0-wmf.22] Respect the echo-read-notifications right in user interface
Stashbot
added a comment.
Mon, Apr 6, 8:44 PM
2026-04-06 20:44:11 (UTC+0)
Comment Actions
Mentioned in SAL (#wikimedia-operations)
[2026-04-06T20:44:10Z]
T420154
)]], [[gerrit:1268202|Grant new 'echo-read-notifications' right to all users (
T422297
)]]
Stashbot
mentioned this in
T422297: Echo fails to fetch notifications for temporary accounts
Mon, Apr 6, 8:44 PM
2026-04-06 20:44:12 (UTC+0)
Comment Actions
Mentioned in SAL (#wikimedia-operations)
[2026-04-06T20:45:44Z]
T420154
)]], [[gerrit:1268202|Grant new 'echo-read-notifications' right to all users (
T422297
)]] synced to the testservers (see
). Changes can now be verified there.
Stashbot
added a comment.
Mon, Apr 6, 8:50 PM
2026-04-06 20:50:41 (UTC+0)
Comment Actions
Mentioned in SAL (#wikimedia-operations)
[2026-04-06T20:50:40Z]
T420154
)]], [[gerrit:1268202|Grant new 'echo-read-notifications' right to all users (
T422297
)]] (duration: 06m 30s)
ReleaseTaggerBot
edited projects, added
MW-1.46-notes (1.46.0-wmf.22; 2026-03-31)
; removed
MW-1.46-notes (1.46.0-wmf.23; 2026-04-07)
Mon, Apr 6, 9:00 PM
2026-04-06 21:00:40 (UTC+0)
Stashbot
added a comment.
Mon, Apr 6, 11:22 PM
2026-04-06 23:22:52 (UTC+0)
Comment Actions
Mentioned in SAL (#wikimedia-cloud)
[2026-04-06T23:22:50Z]
d83be52ab9
(reenable notifications feature with new OAuth consumer:
T420154
T421991
LucasWerkmeister
mentioned this in
R2494:d83be52ab966: Reenable notifications with new OAuth consumer
Mon, Apr 6, 11:40 PM
2026-04-06 23:40:17 (UTC+0)
Legoktm
added a comment.
Wed, Apr 8, 1:52 AM
2026-04-08 01:52:27 (UTC+0)
Comment Actions
In
T420154#11782718
@Trizek-WMF
wrote:
What is the visible consequence for users, before and after the merge?
Given that multiple bots and tools broke, the blast radius was certainly bigger than I personally expected. I've added a note to the next tech news:
Someone still needs to send an email to mediawiki-api-announce...
gerritbot
added a comment.
Thu, Apr 9, 4:18 PM
2026-04-09 16:18:32 (UTC+0)
Comment Actions
Change #1269517 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_45] [i18n] Correct the action message
gerritbot
added a project:
Patch-For-Review
Thu, Apr 9, 4:18 PM
2026-04-09 16:18:33 (UTC+0)
Comment Actions
Change #1269518 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_44] [i18n] Correct the action message
gerritbot
added a comment.
Thu, Apr 9, 4:19 PM
2026-04-09 16:19:02 (UTC+0)
Comment Actions
Change #1269519 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_43] [i18n] Correct the action message
gerritbot
added a comment.
Thu, Apr 9, 4:26 PM
2026-04-09 16:26:39 (UTC+0)
Comment Actions
Change #1269519
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_43] [i18n] Correct the action message
gerritbot
added a comment.
Thu, Apr 9, 4:26 PM
2026-04-09 16:26:47 (UTC+0)
Comment Actions
Change #1269517
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_45] [i18n] Correct the action message
gerritbot
added a comment.
Thu, Apr 9, 4:26 PM
2026-04-09 16:26:53 (UTC+0)
Comment Actions
Change #1269518
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_44] [i18n] Correct the action message
gerritbot
added a comment.
Thu, Apr 9, 4:27 PM
2026-04-09 16:27:17 (UTC+0)
Comment Actions
Change #1269521 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_45] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Thu, Apr 9, 4:27 PM
2026-04-09 16:27:31 (UTC+0)
Comment Actions
Change #1269522 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_44] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Thu, Apr 9, 4:27 PM
2026-04-09 16:27:47 (UTC+0)
Comment Actions
Change #1269523 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_43] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Thu, Apr 9, 4:34 PM
2026-04-09 16:34:28 (UTC+0)
Comment Actions
Change #1269521
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_45] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Thu, Apr 9, 4:40 PM
2026-04-09 16:40:56 (UTC+0)
Comment Actions
Change #1269523
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_43] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Thu, Apr 9, 4:40 PM
2026-04-09 16:40:59 (UTC+0)
Comment Actions
Change #1269522
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_44] refactor: Use a trait to check for reading permissions
gerritbot
added a comment.
Thu, Apr 9, 4:41 PM
2026-04-09 16:41:28 (UTC+0)
Comment Actions
Change #1269528 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_45] Respect the echo-read-notifications right in user interface
gerritbot
added a comment.
Thu, Apr 9, 4:41 PM
2026-04-09 16:41:38 (UTC+0)
Comment Actions
Change #1269529 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_44] Respect the echo-read-notifications right in user interface
gerritbot
added a comment.
Thu, Apr 9, 4:41 PM
2026-04-09 16:41:50 (UTC+0)
Comment Actions
Change #1269530 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_43] Respect the echo-read-notifications right in user interface
gerritbot
added a comment.
Thu, Apr 9, 4:50 PM
2026-04-09 16:50:31 (UTC+0)
Comment Actions
Change #1269528
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_45] Respect the echo-read-notifications right in user interface
gerritbot
added a comment.
Thu, Apr 9, 4:55 PM
2026-04-09 16:55:05 (UTC+0)
Comment Actions
Change #1269529
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_44] Respect the echo-read-notifications right in user interface
gerritbot
added a comment.
Thu, Apr 9, 5:15 PM
2026-04-09 17:15:48 (UTC+0)
Comment Actions
Change #1269530
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_43] Respect the echo-read-notifications right in user interface
Maintenance_bot
removed a project:
Patch-For-Review
Thu, Apr 9, 5:31 PM
2026-04-09 17:31:26 (UTC+0)
gerritbot
added a comment.
Thu, Apr 9, 6:18 PM
2026-04-09 18:18:43 (UTC+0)
Comment Actions
Change #1269553 had a related patch set uploaded (by Reedy; author: Novem Linguae):
[mediawiki/extensions/Echo@REL1_45] ApiEchoPermissionsTrait: don't show $1 to user
gerritbot
added a project:
Patch-For-Review
Thu, Apr 9, 6:18 PM
2026-04-09 18:18:44 (UTC+0)
Comment Actions
Change #1269554 had a related patch set uploaded (by Reedy; author: Novem Linguae):
[mediawiki/extensions/Echo@REL1_44] ApiEchoPermissionsTrait: don't show $1 to user
gerritbot
added a comment.
Thu, Apr 9, 6:19 PM
2026-04-09 18:19:11 (UTC+0)
Comment Actions
Change #1269555 had a related patch set uploaded (by Reedy; author: Novem Linguae):
[mediawiki/extensions/Echo@REL1_43] ApiEchoPermissionsTrait: don't show $1 to user
gerritbot
added a comment.
Thu, Apr 9, 6:27 PM
2026-04-09 18:27:56 (UTC+0)
Comment Actions
Change #1269554
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_44] ApiEchoPermissionsTrait: don't show $1 to user
gerritbot
added a comment.
Thu, Apr 9, 6:28 PM
2026-04-09 18:28:02 (UTC+0)
Comment Actions
Change #1269553
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_45] ApiEchoPermissionsTrait: don't show $1 to user
gerritbot
added a comment.
Thu, Apr 9, 6:31 PM
2026-04-09 18:31:19 (UTC+0)
Comment Actions
Change #1269555
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_43] ApiEchoPermissionsTrait: don't show $1 to user
gerritbot
added a comment.
Thu, Apr 9, 6:45 PM
2026-04-09 18:45:33 (UTC+0)
Comment Actions
Change #1269569 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_44] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Thu, Apr 9, 6:48 PM
2026-04-09 18:48:37 (UTC+0)
Comment Actions
Change #1269570 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_45] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Thu, Apr 9, 6:48 PM
2026-04-09 18:48:56 (UTC+0)
Comment Actions
Change #1269571 had a related patch set uploaded (by Reedy; author: Urbanecm):
[mediawiki/extensions/Echo@REL1_43] Create a new grant for the echo-read-notifications
Reedy
mentioned this in
T422867: Add sortable headers for Related Changes in Gerrit
Thu, Apr 9, 6:51 PM
2026-04-09 18:51:36 (UTC+0)
gerritbot
added a comment.
Thu, Apr 9, 6:56 PM
2026-04-09 18:56:15 (UTC+0)
Comment Actions
Change #1269571
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_43] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Thu, Apr 9, 6:56 PM
2026-04-09 18:56:34 (UTC+0)
Comment Actions
Change #1269569
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_44] Create a new grant for the echo-read-notifications
gerritbot
added a comment.
Thu, Apr 9, 6:56 PM
2026-04-09 18:56:53 (UTC+0)
Comment Actions
Change #1269570
merged
by jenkins-bot:
[mediawiki/extensions/Echo@REL1_45] Create a new grant for the echo-read-notifications
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct.
Wikimedia Foundation
Code of Conduct
Disclaimer
CC-BY-SA
GPL
Credits
US