I think I found a bug in the method userCan() of the Title object. We often use userCan( 'read' ) to ensure that the user is allowed to read the page or that some context is displayed like an extension. If $wgEmailConfirmToEdit is set to true, the behavior of userCan() isn't as expected. Every user, group doesn't matter, who doesn't have a confirmed E-Mail address fails in this check, because in the method checkUserBlock() the error 'confirmedittext' is added to the errors array. The documentation of this method says this check is done to 'Check that the user isn't blocked from editting', but this error is set on every action expect for 'createaccount'.
Version: 1.17.x
Severity: normal