https://bugzilla.wikimedia.org/show_bug.cgi?id=21194

           Summary: Autoconfirmed versus confirmed users
           Product: MediaWiki extensions
           Version: any
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: Normal
         Component: AbuseFilter
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]


The string !("autoconfirmed" in user_groups) does not filter out editors in the
"confirmed" usergroup. Since entrance to this usergroup is granted to allow a
newbie acting in good faith to bypass the 4/10 restrictions on moving pages and
editing through semi-protection, it should naturally also allow them to bypass
any edit filter that only blocks newbies. There would be no real harm in doing
this, as any user could do as much harm by exercising the typical autoconfirmed
rights as they could by bypassing the filter, and any user smart enough to make
a reasonable request for confirmation also knows he can just wait four days.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to