Page MenuHomePhabricator

Class of users that can rollback but have no other admin rights
Closed, ResolvedPublic

Description

Author: p_simoons

Description:
[[Wikipedia:Requests for rollback]].

It has been suggested that some users be promoted to an 'intermediary' class
between regular user and admin, and that these users can rollback (but not
block, protect, or delete).

It may be reasonable to disallow, or severely limit, page moves to users who are
NOT in this intermediary class, to block Willy on Wheels pagemove attacks.


Version: unspecified
Severity: normal
URL: http://en.wikipedia.org/wiki/Wikipedia:Requests for rollback

Details

Reference
bz3317

Related Objects

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 8:49 PM
bzimport set Reference to bz3317.
bzimport added a subscriber: Unknown Object (MLST).

Configuration issue, assigning to Wikimedia web sites.

robchur wrote:

Resetting priority and severity to normal-normal. Please don't alter them again;
it's for us to decide that.

It's not just a configuration issue, you also need a UI for granting it and taking it
away. It's not going to be useful if only stewards can grant it, is it?

robchur wrote:

An excellent point, certainly. Perhaps a clone of Special:Userrights that
bureaucrats can access, to add and remove the flag?

robchur wrote:

There is now an extension in Subversion providing local bureaucrats with the
ability to grant/remove rollback rights from a non-sysop user. This would work
as a stop-gap measure until the user rights interfaces can be gutted and improved.

  • Bug 7097 has been marked as a duplicate of this bug. ***
  • Bug 4863 has been marked as a duplicate of this bug. ***