Interface administrators: Difference between revisions

From WickedGov Meta-Wiki
Jump to navigation Jump to search
Appointment: revise appointment section, add removal section
Tag: Mobile
Line 4: Line 4:
Editing CSS/JS that gets executed in other users' browsers is very powerful and potentially dangerous in the hands of a malicious user; interface administrators should be users who are highly trusted, have at least a basic understanding of CSS and JS, are aware of the privacy expectations of wikis, and have a good understanding of account security.
Editing CSS/JS that gets executed in other users' browsers is very powerful and potentially dangerous in the hands of a malicious user; interface administrators should be users who are highly trusted, have at least a basic understanding of CSS and JS, are aware of the privacy expectations of wikis, and have a good understanding of account security.


== Appointments ==
== Appointment ==
Interface administrators may be appointed on individual wikis, subject to the following rules:
Interface administrators may be appointed on individual wikis, subject to the following rules:


Line 11: Line 11:
* Appointments will be made by local community discussion. If any reasonable objections were raised in the local discussion, there must be broad consensus to grant access.
* Appointments will be made by local community discussion. If any reasonable objections were raised in the local discussion, there must be broad consensus to grant access.
* All users applying for interface administrator access must be a local administrator. If a user's administrator access is removed, interface administrator access must also be removed.
* All users applying for interface administrator access must be a local administrator. If a user's administrator access is removed, interface administrator access must also be removed.
** Exceptions to this criterion are possible for non-administrator bot accounts operated by administrators.
* All interface administrators must have [[Help:2FA|two-factor authentication]] enabled.
* All interface administrators must have [[Help:2FA|two-factor authentication]] enabled.
* ''For indefinite access:'' The wiki must be large enough to require permanent interface administrators. Stewards will make the final determination of this point based on criteria including the size of the community and the frequency of CSS/JS edits being necessary.
* ''For indefinite access:'' The wiki must be large enough to require permanent interface administrators. Stewards will make the final determination of this point based on criteria including the size of the community and the frequency of CSS/JS edits being necessary.
== Removal ==
Stewards will remove interface administrator access in the following cases:
* When an interface administrator has resigned.
* When an account does not meet or no longer meets the two-factor authentication requirement.
* When an account appears to be compromised.
* When an interface administrator is  making suspicious, malicious, or inappropriate edits to the interface.
* According to the [[inactivity policy]] (no local edits or logged actions for 1 year).
* According to local policy.
* According to local consensus to remove the permission.

Revision as of 02:43, 17 March 2025

Interface administrators are local users with the ability to edit sitewide CSS and JS pages and other users' personal CSS/JS pages.

Editing CSS/JS that gets executed in other users' browsers is very powerful and potentially dangerous in the hands of a malicious user; interface administrators should be users who are highly trusted, have at least a basic understanding of CSS and JS, are aware of the privacy expectations of wikis, and have a good understanding of account security.

Appointment

Interface administrators may be appointed on individual wikis, subject to the following rules:

  • Interface administrator access may be granted either temporarily or indefinitely.
  • The local interface administrator flag may be granted and removed by Stewards only.
  • Appointments will be made by local community discussion. If any reasonable objections were raised in the local discussion, there must be broad consensus to grant access.
  • All users applying for interface administrator access must be a local administrator. If a user's administrator access is removed, interface administrator access must also be removed.
    • Exceptions to this criterion are possible for non-administrator bot accounts operated by administrators.
  • All interface administrators must have two-factor authentication enabled.
  • For indefinite access: The wiki must be large enough to require permanent interface administrators. Stewards will make the final determination of this point based on criteria including the size of the community and the frequency of CSS/JS edits being necessary.

Removal

Stewards will remove interface administrator access in the following cases:

  • When an interface administrator has resigned.
  • When an account does not meet or no longer meets the two-factor authentication requirement.
  • When an account appears to be compromised.
  • When an interface administrator is making suspicious, malicious, or inappropriate edits to the interface.
  • According to the inactivity policy (no local edits or logged actions for 1 year).
  • According to local policy.
  • According to local consensus to remove the permission.