[Bug 62561] Non-admins are able to see the title and edit summary of posts that are within deleted topics in Flow

2014-05-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62561

Quiddity pandiculat...@gmail.com changed:

   What|Removed |Added

   See Also||https://bugzilla.wikimedia.
   ||org/show_bug.cgi?id=60972

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 62561] Non-admins are able to see the title and edit summary of posts that are within deleted topics in Flow

2014-03-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62561

Maryana Pinchuk mpinc...@wikimedia.org changed:

   What|Removed |Added

   Priority|Unprioritized   |Normal
   Severity|major   |normal

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 62561] Non-admins are able to see the title and edit summary of posts that are within deleted topics in Flow

2014-03-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62561

--- Comment #3 from Maryana Pinchuk mpinc...@wikimedia.org ---
Quiddity - right, that's why I said modeled on, not identical to ;) 

Flow actions are fundamentally different from page edit actions, so they come
with extra meta-data that may or may not contain inappropriate material.
However, my point stands that if the root issue here is I think it's bad that
some non-admins might see spam/inappropriate words/etc. in contribs or recent
changes, then that's no different from the current system today, because
deleted page titles can include spam, personal attacks, etc., and are visible
to users without admin rights.

Anyway, since we're moving to a more granular revdel-like system of deletion
and suppression in the next sprint, I trust the local admins to make the call
whether a Flow action and its associated meta-data needs to be deleted or
deleted  suppressed.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 62561] Non-admins are able to see the title and edit summary of posts that are within deleted topics in Flow

2014-03-12 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62561

Quiddity pandiculat...@gmail.com changed:

   What|Removed |Added

 Status|UNCONFIRMED |NEW
Summary|Non-admins are able to see  |Non-admins are able to see
   |the title and edit summary  |the title and edit summary
   |of deleted topics in Flow   |of posts that are within
   ||deleted topics in Flow
 Ever confirmed|0   |1

--- Comment #2 from Quiddity pandiculat...@gmail.com ---
(In reply to Maryana Pinchuk from comment #1)
 This behavior in Flow is modeled on how regular Mediawiki page deletion
 works now. See this screenshot of English Wikipedia's recent changes:
 http://imgur.com/LwZyEpj. The last entry is a page deletion action, and you
 can see the title of the page even as a logged out user – so if the title
 were spam, you'd be seeing spam in recent changes/contributions as a
 non-admin.
 

Not quite. In your screenshot, we can't see who edited the page that was
deleted, nor any of their edit summaries.

Longer explanation:
In regular MediaWiki page deletions, the individual page edits are removed from
public view, and only the final page-deletion action is visible to all.

eg. http://i.imgur.com/ivZVvRI.png - Here, #1) User:Derklion makes 2 edits to a
page, then in #2) User:Quiddity deletes that page, which removes Derklion's
contributions entirely from public view (both RC and Contribs), and places them
into the Deleted user contributions feed. 

See http://i.imgur.com/QzLAC2t.png for #1) Derklion edits #2) Quiddity deletes
the page which hides those edits #3) those 2 edits are now only visible in
deleted user contributions.

(Hopefully that's explained clearly. And our apologies for the imgur links, to
those that hate them ;)

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l