Jump to content

Legal talk:Confidentiality agreement for nonpublic information/Archive 1

From Wikimedia Foundation Governance Wiki

OTRS agreement still in "DRAFT" status

Please rectify this forthwith with the final, approved version. Everyone who signed it in its "draft" version will need to re-sign it. Risker (talk) 22:59, 15 September 2015 (UTC)

Thank you for pointing this out! As noted on the how to page, the OTRS agreement is not yet ready. We have locked it down to prevent any further signatures. The folks that signed will be asked to resign when the final OTRS agreement is ready. --GVarnum-WMF (talk) 23:35, 15 September 2015 (UTC)
Or maybe even to "re-sign" it, rather than resign! ;-). Craig Franklin (talk) 02:28, 16 September 2015 (UTC).
Ha - yes - that. Sorry. :) --GVarnum-WMF (talk) 05:30, 16 September 2015 (UTC)

Prefer rule and sent mail

Hallo, I would prefer to call this "rule" because it is not an agreement. secondly, i would agree to the new rule / I hereby sign it / but i can't log in to f*** phabricator, i already sent you an e-mail Gvarnum. Cheers. --Sargoth (talk) 06:35, 16 September 2015 (UTC)

Thank you for the email, I will be responding shortly. --GVarnum-WMF (talk) 15:55, 16 September 2015 (UTC)
@GVarnum-WMF:, as you didn't respond, I consider my case closed by my above signing. If there is any way to ever log in to phabricator again in my lifetime ;-), let me know. Cheers --Sargoth (talk) 11:25, 25 September 2015 (UTC)
@Sargoth and GVarnum-WMF: Hallo. Your case is being handled at phab:T113148, with 20after4/MModell (WMF) responding. Regards. —MarcoAurelio 17:42, 25 September 2015 (UTC)
@Sargoth: I apologize that you did not get my reply. I will resend to verify that email address works. As Marco indicated, this is being looked into at phab:T113148. --GVarnum-WMF (talk) 17:45, 25 September 2015 (UTC)
Maybe you send me a screenshot of phab:T113148 because I can't log in to phab and can't take a look at it otherwise . Just joking. @GVarnum-WMF:, I hereby confirm having received your mail from 25.09.2015 19:46 CET. Also you may show the dead end Sargoth.jpg - screenshot I sent to whomever you want, the mail address shown is not a "real" one. Cheers --Sargoth (talk) 19:35, 25 September 2015 (UTC)
@Sargoth: I think it will be resolved - but waiting for the folks with access to do so. :) --GVarnum-WMF (talk) 19:41, 25 September 2015 (UTC)
@Sargoth: Your email address has been reset in phabricator. Apologies for taking so long to get it fixed up. Let me know if you still can't log in! --MModell (WMF) (talk) 13:26, 1 October 2015 (UTC)
Everything works fine now. Thanks MModell (WMF) :-) --Sargoth (talk) 13:45, 1 October 2015 (UTC)
Excellent - thank you both! --GVarnum-WMF (talk) 18:54, 1 October 2015 (UTC)

phabricator-production needs permission

It's not relevant to me as I don't have access to anything, but this page was mentioned at enwiki and I wanted to see what "Step 1: Create a Phabricator account" involves. Afters steps 1, 2, 3 I saw:

In order to complete your request, phabricator-production needs permission to access information on all projects of this site on your behalf. No changes will be made with your account.

I would hope that people with advanced permissions are not sheep who click buttons with marketspeak instructions such as the above. What does it mean? I clicked the wmf:Privacy policy link but that page is standard obfuscation with no mention of "phabricator". What is phabricator-production? What does "access...on your behalf" mean? Read? Write? Impersonate? Johnuniq (talk) 01:26, 19 September 2015 (UTC)

I'll leave Greg to answer, but it seems to me this is the OAuth extension asking permission to login (mw:Help:OAuth). —MarcoAurelio 15:47, 19 September 2015 (UTC)
Hello Johnuniq. My understanding is that Marco is correct and that it is just for identity verification. Qgil or someone on his team may have a more detailed explanation. --GVarnum-WMF (talk) 16:06, 19 September 2015 (UTC)
@Johnuniq: yes, all what Phabricator wants to know is your Wikimedia username, in order to connect it to your Phabricator username and allow you to log in through it. Phabricator will not access to your Wikimedia contributions or edit on your behalf. There is a task in Phabricator aiming to make this and other OAuth dialogs clear to users: phab:T91825.--Qgil-WMF (talk) 08:34, 21 September 2015 (UTC)

Confidentiality agreement for nonpublic information — Age (§ 1, 4th phrase)

‘… you certify that you are at least X years of age …’ — Could you please update the document with the correct value? Thanks! Ireas (talk) 21:29, 28 September 2015 (UTC)

That is intentionally left that way. The actual document which you are signing on Legalpad shows the correct age. The reason is that there are two variations of the agreement, one requires 16 years of age and the other requires 18 years of age. The Meta-Wiki page is setup for translation of both documents, and so it is meant to show "X" so we can locate the value easily in translations. --GVarnum-WMF (talk) 22:02, 28 September 2015 (UTC)
Thanks for the explanation. Is it possible to add a short explanation to the wiki version? It is linked directly from the talk page message, and I think I’m not the only one who will read the wiki page before the Phabricator document. Ireas (talk) 22:17, 28 September 2015 (UTC)
That's a good idea - I can add something to the header. Changing the text of the actual document is a rather complicated and lengthy process. --GVarnum-WMF (talk) 22:21, 28 September 2015 (UTC)
Thanks! :) Ireas (talk) 22:25, 28 September 2015 (UTC)
 Done May tweak more. Thank you for the suggestion. --GVarnum-WMF (talk) 22:28, 28 September 2015 (UTC)

Email address

When I just created my Phabricator account I noticed that the system sent the confirmation email to an address to which I no longer have access. As far as I know I have changed the address to my new one in all my accounts. Where do I change the Phabricator account address please? Thanks. --ukexpat (talk) 23:29, 28 September 2015 (UTC)

@Ukexpat: It sounds like this is something that the Phabricator admins need to fix. Can you please email me to verify which email address you would prefer to be using with that account: gvarnum@wikimedia.org Thank you! --GVarnum-WMF (talk) 10:29, 1 October 2015 (UTC)
@GVarnum-WMF: - you've got mail. Thanks.--ukexpat (talk) 00:30, 8 October 2015 (UTC)
@Ukexpat: great - thank you! I've setup a ticket in Phabricator to track the fix and sent your address (privately) to the person who can fix it. --GVarnum-WMF (talk) 18:39, 9 October 2015 (UTC)


Is "Name" supposed to be my Wikimedia user name or my legal name? If the latter, is the list of signatories, etc, private? --B (talk) 00:01, 6 October 2015 (UTC)

@B: You can use either, and yes, the list of signatures is private. Hope that helps. Thank you! --GVarnum-WMF (talk) 18:40, 9 October 2015 (UTC)
Curiosity as much as anything - who has access to the names of those who signed? -- Euryalus (talk) 00:53, 19 October 2015 (UTC)
@Euryalus: I have access to them, along with the Community Advocacy staff. The OTRS agreement signatures are also accessible by the OTRS Admins. --GVarnum-WMF (talk) 23:30, 20 October 2015 (UTC)


For account creators, how much age is required? 16 or 18? Thanks Supdiop (talk) 09:56, 13 October 2015 (UTC)

The age requirement for the general agreement is 18 years old. OTRS volunteers are the only ones for this agreement where the age is 16 years old. --GVarnum-WMF (talk) 21:14, 13 October 2015 (UTC)

OK to agree to both?

There are two agreements listed:

  • General confidentiality agreement for nonpublic information (for non-OTRS related access to nonpublic information)
  • OTRS users confidentiality agreement for nonpublic information

While I do not currently have OTRS, checkuser or oversight rights, I want the way to be clear to obtaining them in the future, and I carefully read and 100% agree with all the provisions of both agreements, so I signed both. Is this allowed?

Also, if someone sees that my name is on the noticeboard tracking agreements on the private OTRS wiki, could you post a note here so that I know?

My user name (and legal name) is Guy Macon, but I had to log on to phabricator as Guy_Macon because it doesn't accept spaces in usernames. How very 1990... :) --Guy Macon (talk) 03:00, 14 October 2015 (UTC)

Yes, it is fine to sign them both. --GVarnum-WMF (talk) 15:29, 14 October 2015 (UTC)

Where do I sign?

Came here after a few messages were posted on my talk page over at WB. Was hoping to see a simple button which says 'confirm' or whatever. Indeed, there is a button but it's not actually a button. Where am I supposed to sign? Why is it so complicated? And how exactly am I subject to US law as the main page suggests? Are you trying to claim jurisdiction over the whole world now? I know it's just a thing we have to sign and all that. --Xania (talk) 14:05, 27 October 2015 (UTC)

I eventually completed the process but it is a pain in the arse and unnecessarily complicated. Asking us to simply add a statement to our user pages would have been enough. The statement You are now legally bound to the confidentiality agreement for nonpublic information and able to access nonpublic information is also rubbish. I am in no way subject to US law so please don't pretend that we are. If you want to subject your checkusers and other users to US law then you should only use American citizens for these roles.--Xania (talk) 14:22, 27 October 2015 (UTC)
@Xania: your accessing data held on a US server, so yes, you are subject to US laws. Mdann52 (talk) 10:07, 1 January 2016 (UTC)


I am 99% sure I signed the OTRS agreement correctly, but is there any confirmation that I did? —Fredddie 03:48, 7 November 2015 (UTC)

It looks like they have that documented on the OTRS wiki (which is where that agreement is being tracked). It's under the column marked "2". --GVarnum-WMF (talk) 20:46, 7 November 2015 (UTC)


I wasn't aware I still had OTRS access - I knew I got it when I was a trustee of WMUK some years ago, but I have never used it, don't know how, and have no need for it. Please remove it. Thanks, Johnbod (talk) 16:19, 22 December 2015 (UTC)

 Done Rjd0060 (talk) 19:31, 22 December 2015 (UTC)