https://bugzilla.wikimedia.org/show_bug.cgi?id=47480
Sam Reed (reedy) <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #1 from Sam Reed (reedy) <[email protected]> --- (In reply to comment #0) > The new† AJAX method of watching pages, implemented in > `/resources/mediawiki.page/mediawiki.page.watch.ajax.js`, makes uses of the > MW > API methods for watching pages (http://www.mediawiki.org/wiki/API:Watch). > > Unfortunately, this API method is part of the editing API and as such > requires > `$wgEnableWriteAPI` to be enabled *and* the `writeapi` right. > > As `$wgEnableWriteAPI` is enabled by default since 1.14, it’s somewhat safe > to > assume that it is enabled. The `writeapi` right however should not be > required > for a basic functionality such as watching pages. > > On our wiki, we have the `writeapi` enabled for autoconfirmed users and > above. > This is mainly to prevent vandals to create new users and then use the API to > quickly vandalize the wiki (yes, that has happened before). > > Now with the new AJAX functionality, this implies that only autoconfirmed > users > can watch pages. This is a terrible usability issue. > > Watching pages, which is a very fundamental functionality for registered > users, > should not be restricted by either the `writeapi` right, or even the > `$egEnableWriteAPI` setting. It makes perfect sense for wikis to disable the > write API altogether while still expecting users to be able to watch pages. > > In a first step, I would argue why watching pages via the API even requires > the > write API. Yes, it is a “changing” operation, but it should not be considered > an operation that changes wiki *content*. And it is restricted to the current > user anyway. Seems a bit of a daft exclusion case. Same problem occurs if the api is disabled completely. Should api watch still work? Should we really add numerous exceptions for action=watch? -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
