https://bugzilla.wikimedia.org/show_bug.cgi?id=33731

       Web browser: ---
             Bug #: 33731
           Summary: Uploading to a protected file returns permissiondenied
                    instead of protectedpage
           Product: MediaWiki
           Version: 1.18
          Platform: All
               URL: http://en.wikipedia.org/w/api.php?action=upload&format
                    =xml&title=File:Button_hide_comment.png
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: API
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected], [email protected],
                    [email protected], [email protected]
    Classification: Unclassified


The bug was seen on Wikia (Special:Version states that version 1.16.5 is in
use) and Wikipedia English (Special:Version states that version 1.18wmf-1
derived from r107965 is in use).

Ending a page edit with the proper token in the API yields an error such as

<error code="protectedpage" info="The ``protect'' right is required to edit
this page" />

But ending a page upload with the proper token yields an error such as

<error code="permissiondenied" info="Permission denied" />

I believe the permissiondenied code is inappropriate in this situation, because
it is usually used to signify that the user does not have the right to perform
this action regardless of page (for example, an anonymous user cannot upload
files to the wiki). It should be the protectedpage code to signify that the
user does have the right but cannot exercise it for specific protected (hence
the name) pages.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to