Page MenuHomePhabricator
Create Task
Maniphest T13346

Sysops can unprotect/delete pages they cant edit
Closed, ResolvedPublic
Actions

Description

Author: fearow00

Description:
When you have a higher-than-sysop protection level (i.e. bureaucrat or siteadmin) on a page, sysops can still unprotect that page or delete and recreate to edit. All actions should be blocked on a page, without having to add extra actions to protect against (protect, unprotect, delete, etc)

Version: 1.12.x
Severity: enhancement

Details

Reference
bz11346

Event Timeline

• bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:59 PM
• bzimport added a project: MediaWiki-Page-editing.
• bzimport set Reference to bz11346.
• bzimport added a subscriber: Unknown Object (MLST).
• bzimport created this task.Sep 15 2007, 6:34 AM
• bzimport added a comment.Sep 17 2007, 3:46 AM

fearow00 wrote:

I can provide a link to where this is - also, I cant add protect, unprotect, delete, etc to the protected actions as it doesnt apply. Weird.

• werdna added a comment.Dec 1 2007, 9:09 AM

FIXED in r28007.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL