Author: matthew.britton
Description:
Using action=paraminfo on the userrights module:
http://en.wikipedia.org/w/api.php?action=paraminfo&modules=userrights
gives the error "The user parameter must be set", as though action=userrights had been called directly. The query works if a 'user' parameter is given -- any user, so long as they exist:
http://en.wikipedia.org/w/api.php?action=paraminfo&modules=userrights&user=User
However, the output of paraminfo is not dependent on this parameter, so it should not be a requirement. No other modules seem to exhibit this behavior; for example
http://en.wikipedia.org/w/api.php?action=paraminfo&modules=edit
works correctly, even though the edit module has required parameters.
Version: 1.17.x
Severity: normal
URL: http://en.wikipedia.org/w/api.php?action=paraminfo&modules=userrights