https://bugzilla.wikimedia.org/show_bug.cgi?id=25976

           Summary: Lockdown extension overrides wgGroupPermissions
           Product: MediaWiki extensions
           Version: any
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: critical
          Priority: Normal
         Component: [other]
        AssignedTo: wikibugs-l@lists.wikimedia.org
        ReportedBy: proll...@gmail.com


Although the header of Lockdown.php says "NOTE: you cannot GRANT access to
things forbidden by $wgGroupPermissions. You can only DENY access granted
there." the mere inclusion of Lockdown.php leads to this configuration being
ignored:

$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['user']['edit'] = true;

Any user has edit privileges when Lockdown is active.

This is discussed here:
http://www.mediawiki.org/wiki/Extension_talk:Lockdown#Seconded_-_Overriding_.24wgGroupPermissions.3F

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to