https://bugzilla.wikimedia.org/show_bug.cgi?id=39507

--- Comment #6 from Woozle <[email protected]> ---
The problem seems to be that the form shows the necessary controls for
uploading by URL even if the user does not have permission to do so, while the
code for processing the form fails silently if the user does not have
permission (perhaps assuming that the necessary controls would ''not'' display
in this case, in which case this condition could only be the result of a
deliberate hack).

To reproduce this bug, then, all you have to do is have $wgAllowCopyUploads set
TRUE and then attempt an upload while logged in as a user who does not have
upload_by_url permission.

Suggested remedy: display a message indicating that the user doesn't have the
upload_by_url permission, and link to this page for further explanation:
https://www.mediawiki.org/wiki/Manual:$wgAllowCopyUploads

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to