We should have a selenium tests that makes sure that items can not be viewed if the user does not have the read permission. This should be done at least for normal pages views, history views, and diffs. It could possibly also cover action=raw (currently completely disabled), Special:Export, and API modules for listing revisions, rendering pages, etc.
Description
Description
Details
Details
- Reference
- bz40723
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | • Jonas | T88541 [DO NOT USE] Wikidata Browsertests (tracking) [superseded by #Browser-Tests] | |||
Declined | None | T42723 [Task] Browsertests for read permission |
Event Timeline
Comment Actions
Going to close this 4+ year old ancient ticket as we may not even want these things now.
We have a new story that will be taking a fresh look at our tests.
If we decide we want these things, new tasks would be created or reopened etc.
T226975: [Story] Restructuring Wikibase extension tests