https://bugzilla.wikimedia.org/show_bug.cgi?id=17077
Summary: Sysop and bureaucrat rights not effective after adding
user via UserLoadFromSession hook.
Product: MediaWiki
Version: 1.13.0
Platform: All
URL: http://(internal)
OS/Version: Solaris
Status: NEW
Severity: major
Priority: Normal
Component: Special pages
AssignedTo: [email protected]
ReportedBy: [email protected]
I submitted the attached report to the
[http://www.mediawiki.org/wiki/Project:Support_desk/Sections/Extension#Problem_with_sysop.2Fbureaucrat_permissions_after_creating_account_with_UserLoadFromSession_hook
Support Desk] as an Extension problem - perhaps not totally accurate, but it
appeared to be the most appropriate classification. However, the only update
has been by myself.
I've since delved a bit deeper but am not so gradually getting out of my depth
and seriously suspect that a bug might be involved as this hook was only
introduced in 1.13.0 - although I realise that there are a few extensions using
it. I thought that bug 14914 might have been helpful, but it appears not.
Since the report below, I have dug down through SpecialPage:getUsablePages,
userCanExecute in the same script and isAllowed in User.php, but would
appreciate some help on this, as it (and a problem with export/import) is
holding up implementation of the new version of the wiki.
Here is a sample of debug output from SpecialPage.php[getUsablePages] and
User.php[isAllowed] from my accessing the Special Pages page - as shown below,
Userlist shows me as sysop and breaucrat:
TGST: action is mergehistory
TGST: Right: createaccount
TGST: Right: read
TGST: Right: edit
TGST: Right: createpage
TGST: Right: createtalk
TGST: Right: writeapi
TGST: Right: move
TGST: Right: move-subpages
TGST: Right: read
TGST: Right: edit
TGST: Right: createpage
TGST: Right: createtalk
TGST: Right: writeapi
TGST: Right: upload
TGST: Right: reupload
TGST: Right: reupload-shared
TGST: Right: minoredit
TGST: Right: purge
TGST: Right: autoconfirmed
TGST: Page MergeHistory User: Sam.Sexton CAN NOT see page.
This is logically consistent as far as it goes, but inconsistent with my being
both sysop and bureaucrat. For a long time I suspected that I'd missed a step
from creating the user account, but now I'm not so sure and would appreciate a
much more experienced opinion on the problem.
Many thanks in advance.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l