phacility/phabricator · warning · Exception

You can not request verification of this commit because you

Error message

You can not request verification of this commit because you are not the author.

What it means

Request Verification is the commit author's tool to send a needs-verification commit back to auditors; validateAction() enforces that only the author can trigger it. If the acting viewer did not author the commit, the transaction is rejected before any state change.

Source

Thrown at src/applications/diffusion/xaction/DiffusionCommitVerifyTransaction.php:44

  public function getColor() {
    return 'indigo';
  }

  protected function getCommitActionOrder() {
    return 600;
  }

  public function getActionName() {
    return pht('Requested Verification');
  }

  public function applyInternalEffects($object, $value) {
    $object->setAuditStatus(DiffusionCommitAuditStatus::NEEDS_VERIFICATION);
  }

  protected function validateAction($object, PhabricatorUser $viewer) {
    if (!$this->isViewerCommitAuthor($object, $viewer)) {
      throw new Exception(
        pht(
          'You can not request verification of this commit because you '.
          'are not the author.'));
    }

    if (!$object->isAuditStatusConcernRaised()) {
      throw new Exception(
        pht(
          'You can not request verification of this commit because no '.
          'auditors have raised concerns with it.'));
    }
  }

  public function getTitle() {
    return pht(
      '%s requested verification of this commit.',
      $this->renderAuthor());
  }

View on GitHub (pinned to 5720a38cfe)

Solutions

  1. Have the commit author perform the Request Verification action
  2. For automation, attribute commits to the account that will drive verification, or act via the author's identity through the API
  3. If the author is unavailable, adjust auditors or status through other transactions instead
Defensive patterns

Strategy: validation

Validate before calling

if (!$this->isViewerCommitAuthor($object, $viewer)) {
  // hide Request Verification for non-authors
}

Prevention

When it happens

Trigger: A non-author (auditor, admin, passerby) selects 'Request Verification' on a commit in Concern Raised state; automation flags commits for verification using a shared account that is not the author.

Common situations: A lead trying to drive the audit loop on other people's commits; bots acting outside the author identity.

Related errors


AI-assisted analysis of phacility/phabricator@5720a38cfe (2026-08-21). Data as JSON: /api/errors/c552f334f0d344ef. Report an issue: GitHub.