[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-05-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

--- Comment #8 from Nemo federicol...@tiscali.it ---
Can/must be addressed by being stricter in or around allowProcess() in
MessageWebImporter?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-11 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

Niklas Laxström niklas.laxst...@gmail.com changed:

   What|Removed |Added

   Priority|Unprioritized   |Low
 Status|RESOLVED|REOPENED
 Resolution|WONTFIX |---
   Severity|normal  |minor

--- Comment #7 from Niklas Laxström niklas.laxst...@gmail.com ---
Reopening. While I don't generally care about supporting protected pages with
translation, it is not good to be able to bypass restrictions. There is is
chance that in due time someone will use this together with some other
vulnerability to do a nasty exploit.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-09 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

Kunal Mehta (Legoktm) legoktm.wikipe...@gmail.com changed:

   What|Removed |Added

 CC||legoktm.wikipe...@gmail.com

--- Comment #5 from Kunal Mehta (Legoktm) legoktm.wikipe...@gmail.com ---
(In reply to comment #1)
 Protected pages and translatable pages are fundamentally incompatible.

Shouldn't $title-userCan('edit') work on any type of page? This seems like a
pretty large bug. 

Can you import a translation to overwrite a page in the MediaWiki namespace?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-09 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

--- Comment #6 from Nemo federicol...@tiscali.it ---
(In reply to comment #5)
 Can you import a translation to overwrite a page in the MediaWiki
 namespace?

Needs testing on an appropriately configured wiki. On Meta (and most wikis) you
can't make a MediaWiki page directly translatable and when a page doesn't
belong to a message group any handcrafted po import will probably fail in way
earlier stages.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

Siebrand Mazeland siebr...@wikimedia.org changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |WONTFIX

--- Comment #1 from Siebrand Mazeland siebr...@wikimedia.org ---
Protected pages and translatable pages are fundamentally incompatible. Unmark a
page for translation if you want to be able to protect it. This feature request
will not be honored.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

Nemo federicol...@tiscali.it changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|WONTFIX |---

--- Comment #2 from Nemo federicol...@tiscali.it ---
Siebrand, you may need to read more carefully: not the page, but a message is
protected. I was told to file this bug by Niklas.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

Nemo federicol...@tiscali.it changed:

   What|Removed |Added

 Status|REOPENED|NEW

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

Siebrand Mazeland siebr...@wikimedia.org changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |WONTFIX

--- Comment #3 from Siebrand Mazeland siebr...@wikimedia.org ---
(In reply to comment #2)
 a message is protected.

Thank you for making the effort to file a bug, Federico.

I think this makes it even more clear page protection and translatable pages
are incompatible. Niklas telling you to file a bug is not relevant for the bug
state.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 61087] Special:ImportTranslations allows to edit protected pages

2014-02-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=61087

--- Comment #4 from Niklas Laxström niklas.laxst...@gmail.com ---
The example page is from central notice translations, not translatable page.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l