Are there any notes that indicate that this issue has been corrected by
a more recent release?

Shouldn't the protect prevent you from editing a page that has been
protected? It says that the page can only be edited by a Sysop, but it's
allowing anyone to edit it.


Mike Kingery
Director of Technical Services
Health Level Seven International
+1 (919) 636-4032


-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Platonides
Sent: Friday, July 30, 2010 6:49 PM
To: [email protected]
Subject: Re: [Mediawiki-l] Protect tab not working the way I expected

Michael Kingery (HL7) wrote:
> Here's the basic information about my install:
> 
> MediaWiki         1.12.0
> PHP                 5
> Database          MySQL
> 
> What I'm looking to do is to allow any user with edit permissions to
be
> able to Protect a page so that only Sysops are able to edit /
unprotect
> it. To do this I turned on the Protect tab with the following code in
> the LocalSettings.php file:
> 
> # Only allow users and sysops to protect a page
> $wgGroupPermissions['*']['protect'] = false;
> $wgGroupPermissions['user']['protect'] = true;
> $wgGroupPermissions['sysop']['protect'] = true;
> 
> The Protect tab does show up now, and you can protect a page, but when
> ANYONE with edit privileges goes to edit they are able to do so
> regardless of unprotecting the page or being a sysop. When editing, it
> does show the following message, but lets you edit and save anyways:
> 
> WARNING: This page has been locked so that only users with sysop
> privileges can edit it.
> 
> Any thoughts?

First thought: You are using an insecure mediawiki version released more
than two years old. There have been four major versions since.

Second one: The protect right allows you to protect a page, unprotect a
page and edit protected pages.


_______________________________________________
MediaWiki-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

_______________________________________________
MediaWiki-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to