diff --git a/src/applications/meta/xactions/PhabricatorApplicationUninstallTransaction.php b/src/applications/meta/xactions/PhabricatorApplicationUninstallTransaction.php --- a/src/applications/meta/xactions/PhabricatorApplicationUninstallTransaction.php +++ b/src/applications/meta/xactions/PhabricatorApplicationUninstallTransaction.php @@ -80,4 +80,13 @@ } } + public function shouldTryMFA( + $object, + PhabricatorApplicationTransaction $xaction) { + // Uninstalling an application is a big deal, so we should require MFA + // as a precaution similarly to empowering users. + // See also https://we.phorge.it/T15490 + return true; + } + }