https://bugzilla.wikimedia.org/show_bug.cgi?id=34303
Web browser: ---
Bug #: 34303
Summary: Comments: Server must reject comments if they come
from users without "comment" right.
Product: MediaWiki extensions
Version: any
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: Comments
AssignedTo: [email protected]
ReportedBy: [email protected]
CC: [email protected]
Classification: Unclassified
Created attachment 9975
--> https://bugzilla.wikimedia.org/attachment.cgi?id=9975
Trivial patch.
Hi,
If user does not have "comment" right, hiding edit field is not enough. Sever
must also validate user rights and reject comments coming from user with no
"comment" right, otherwise smart guys can post comment.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
