https://bugzilla.wikimedia.org/show_bug.cgi?id=37989
Web browser: ---
Bug #: 37989
Summary: permissions must be checked on item creation
Product: MediaWiki extensions
Version: master
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: WikidataRepo
AssignedTo: [email protected]
ReportedBy: [email protected]
CC: [email protected]
Classification: Unclassified
Mobile Platform: ---
Currently, permissions are only checked correctly when modifying existing
items, not when creating items. The reason is that permission checks are title
based, but we can only have a title after the item has been recorded in the
database. Which we don't want to do if the user shouldn't be allow to create
the item.
So... make a dummy title? or just check user rights, and not title based
permissions?
Note: the ultimate permission check should be implemented in Item::save().
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
