Page MenuHomePhabricator

Search suggest shouldn't offer special pages with limited access to users who don't have such rights
Closed, DeclinedPublic

Description

Search suggest shouldn't offer special pages with limited access to users who don't have such rights.

Eg. regular user shouldn't be offered Special:BlockIP Special:RenameUser etc...


Version: unspecified
Severity: enhancement

Details

Reference
bz20868

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:53 PM
bzimport added a project: MediaWiki-Search.
bzimport set Reference to bz20868.
bzimport added a subscriber: Unknown Object (MLST).

This is a core feature -> changing product/component.

Search suggest doesn't provide completions on officewiki if you aren't logged in. Is this (similar to) what you mean?

It's debatable whether this is intended behaviour or not.

On the one hand, the pages are real pages that do actually exist, so it makes sense that they're shown. On the other hand, Special:SpecialPages does not list such pages if they cannot be accessed by the user due to their rights (or lack thereof).

Deskana added subscribers: debt, EBernhardson.

Having thought about this more and discussed it with @EBernhardson and @debt, we have decided to decline this task. Search's function is to tell you whether pages exist or not; it does not (and should not) care if you can't use them or not.

If there is a specific case where it would incredibly damaging (e.g. security issues) for this functionality to exist, please let me know and we can reopen.