User:AKlapper (WMF)/NDAAccess

A random draft of unclearness

Because: Confusion, bottleneck, anger, frustration, flagburning. Examples: T115735, T114005.


 * Queue: https://phabricator.wikimedia.org/project/profile/974/
 * What: 1) Volunteers to request permissions that require signing an NDA. 2) Request to be in WMF-NDA Phabricator project.
 * Docs to really really improve, but only for 1): https://wikitech.wikimedia.org/wiki/Volunteer_NDA

How to check and perform a request for 2)?


 * Access to L2: Making a user a member of the Phabricator "WMF-NDA-Requests" project allows accessing L2. L2 is linked from https://wikitech.wikimedia.org/wiki/Volunteer_NDA but everybody clicking without being a group member will get "Access Denied: Restricted Legalpad Document. You do not have permission to view this object." Why can't everybody access it by default?
 * We do not need ops, really: https://phabricator.wikimedia.org/T119122#1862338
 * For those deciding on the request:
 * Is the wiki account linked from the Phabricator user profile?
 * Is the LDAP user defined on that page? (If so, check wikitech.wm.org)
 * Or check the associated user's SUL account on mediawiki.org?
 * Check https://www.mediawiki.org/wiki/Special:CentralAuth/Whatever_Username where the account was created under "Method (+)", e.g. on xyz
 * Check on xyz/wiki/Special:Log?page=User:Whatever_Username for "was created by" by another WMF account who we know to be legitimate.
 * If not created by another WMF account: "The MediaWiki account this is linked to got created by the account owner themself on the English/whatever Wikipedia, so we don't know if it's a legitimate account or not"
 * wikimediafoundation.org accounts are separate (no SUL) hence nothing to check for here
 * https://tools.wmflabs.org/guc/?user=Whatever_Username is not sufficient
 * Is the wiki account not linked from Phabricator user profile?
 * Ask user to go to https://phabricator.wikimedia.org/settings/panel/external/ and set up their external 'MediaWiki' account
 * If user works for WM: How and who to check that user has signed an NDA in the process of employment?