https://bugzilla.wikimedia.org/show_bug.cgi?id=17014
--- Comment #6 from Splarka <[email protected]> 2009-06-18 00:59:01 UTC --- It is possible to have opt-in groups (as per test.wikipedia) whereby a user without block/unblock ability can manipulate user rights. I suggest that anyone with access to UserRights via: $wgAddGroups $wgRemoveGroups $wgGroupsAddToSelf $wgGroupsRemoveFromSelf should be blocked from editing user rights if they are blocked. Conversely, anyone with the 'userrights' permission should not be blocked from user rights if blocked, as this implies full access to all rights on the wiki (in theory). The reason is: having 'userrights' permission does not imply having 'block'. It is not uncommon for a 'bureaucrat' to not also be a 'sysop' (obviously does not apply to WMF projects, where bureaucrats don't have full access to userrights). 2 cents. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
