Phabricator/Permissions

Roles and permissions in phabricator.wikimedia.org.

Anonymous users
Anonymous users can view all the public information as read-only.

Registered users
Registered users can perform all the common activities: create and edit tasks, comment, upload mockups and files, edit their own profile...

Any Wikimedia SUL and any Wikimedia LDAP user can register.

Phabricator team

 * The default homepage dashboard is handled by the [https://phabricator.wikimedia.org/tag/phabricator/ Phabricator team].


 * help>Special:MyLanguage/Phabricator/Help#Creating a project|Creation of projects is handled by the [https://phabricator.wikimedia.org/tag/project-creators/ Project creators team].

Security related teams
The phab>phab:tag/security/|Security group project has access to Security issues.

See Access To Security Issues for group membership.

Administrators
[https://phabricator.wikimedia.org/people/query/Df0Mt44LIdkZ/#R Administrators] can do and break a lot, although [https://secure.phabricator.com/book/phabricator/article/users/#administrators in Phabricator they are not all-powerful] by design.

They can access protected data (except your password), and they can make it accessible to others accidentally. However, administrators cannot bypass object access policies.

For these reasons, membership of the Administrators team is very restricted.

No one can be an administrator in Phabricator without signing an NDA.

A process to join/leave this team must be defined (currently, please file a task under tag/phabricator/ and explain your reasoning).

Also see the (now obsolete) wmf>wmf:Bugzilla administrator rights policy|Bugzilla administrator rights policy.

Phabricator Training
See the Help page to learn more about using Phabricator.