ah:) cool. I did not mean to open it again. that was just because I had the tab already open when you closed it.

I can confirm the BarryTheBrowserTestBot account is now inactive in Gerrit. From the All-Users.git database:

$ git show
commit 94c67416a2c1adc8bde631e6c9e72701915e424f (HEAD -> users/53/2653, origin/users/53/2653)
Author: [BOT] Gerrit Code Review <gerrit@wikimedia.org>
Date:   Fri Oct 3 06:39:58 2025 +0000

Mentioned in SAL (#wikimedia-releng) [2025-10-03T06:42:11Z] <hashar> gerrit set-account BarryTheBrowserTestBot --inactive # T388662 T390070

As part of this task I found out that the logic to ban an account in Gerrit was not migrated from the wikitech-l MediaWiki hook to Bitu. Blocks were ineffective. I went to implement support for blocking users in Gerrit by porting the PHP code to Python. This was done via T390070

not that my opinion matters but I support @Dzahn's point

This specific type of request has become standard for WMDE staff afaict. A custom form for it would probably be helpful. So that it's clear for clinic duty and the new WMDE staff doesn't have to worry about the details.

Thank you, @Aklapper. The agreement has been sent out for signatures. I'll confirm when it's complete.

This ticket is mostly a duplicate of T405917 now. (but don't worry about it too much, not a big deal, it is being handled either way)

Hi all, may I move forward with processing the NDA?

But they are saying no ssh needed.. so we can safely assume they mean the lowest of the 3 levels.

(this should be like https://gerrit.wikimedia.org/r/c/operations/puppet/+/1191507/4/modules/admin/data/data.yaml)

@Maria_Lechner_WMDE: Hi, which documentation were you following creating this ticket? Asking as WMF-NDA-Requests is not the right project tag, LDAP-Access-Requests feels more relevant. So there might be some docs to improve. :)

Fixing the tags since this is not an LDAP group request.

tagging Data Engineering for visibility per https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#analytics-privatedata-users

Thank you! And previously I had followed the instructions here: https://www.mediawiki.org/wiki/Product_Analytics/Superset_Access

Hi and welcome! I am curious which docs you followed to end up filing a task. They may welcome updating. :)
Please see https://phabricator.wikimedia.org/project/profile/1564/ - thanks!

Approved.

Thanks, adding @Nikerabbit here

In T404903#11195771, @Dzahn wrote:

The docs say membership in wmf should be enough to log into superset. Can you not log into it?

Or can you log into it but this request is specifically about seeing more private data including PII ?

In this context, please see https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#analytics-privatedata-users

The docs say membership in wmf should be enough to log into superset. Can you not log into it?

Oh, if that's the case then this is a different type of request.

Hi - please grant me access to the analytics-privatedata-users group.

@EMill-WMF You do not have shell access (and for this type of request it doesn't actually matter much or at all for us, aware the template asks you for it though).

@Aklapper This: https://www.mediawiki.org/wiki/Product_Analytics/Superset_Access#Requesting_access Specifically, the this Phabricator form link.

@EMill-WMF: Hi, which exact docs are you following which made you create this task? Thanks :)

I am not actually certain if I have shell access or not. My account at https://idm.wikimedia.org says my shell username is ericmill, but I don't recall specifically requesting shell access.

Change #1189257 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] admin: add huei tan to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1189257

Hi @hueitan! We need approval from your manager on this ticket to move this forward.

Thanks, everything works as expected.