https://bugzilla.wikimedia.org/show_bug.cgi?id=32595

       Web browser: ---
             Bug #: 32595
           Summary: clean up use of abusefilter-private user rights
           Product: Wikimedia
           Version: unspecified
          Platform: All
               URL: http://meta.wikimedia.org/w/api.php?action=query&meta=
                    globaluserinfo&guiuser=Brion
                    VIBBER&guiprop=groups|rights
        OS/Version: All
            Status: NEW
          Keywords: shell
          Severity: normal
          Priority: Unprioritized
         Component: Site requests
        AssignedTo: [email protected]
        ReportedBy: [email protected]
    Classification: Unclassified


bug 29922 removes the abusefilter-private user rights from $wgAvailableRights.

But you have to clean up the use of that user rights inside CentralAuth. The
user right was assigned to the global group sysadmin while removing. It is
shown as set when getting the user rights of a user with the api (see url as
example).

Maybe other global groups has this right also set. Please remove it from the
sysadmins group and check all other groups. The best way is, to enable the user
right, remove it from [[meta:Special:GlobalGroupPermissions/sysadmin]] (which
produce a log entry for transparent) and then disable it again.

Another way is to check in CentralAuth against $wgAvailableRights before giving
the rights back or do permissions check. If that is better, move this bug to
CentralAuth (or create/clone a new bug).

Thanks.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to