https://bugzilla.wikimedia.org/show_bug.cgi?id=56975

       Web browser: ---
            Bug ID: 56975
           Summary: OAuth cache suppression impact
           Product: MediaWiki extensions
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: OAuth
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected], [email protected],
                    [email protected], [email protected],
                    [email protected]
    Classification: Unclassified
   Mobile Platform: ---

For OAuth, we added a hook to User::isEveryoneAllowed() to remove rights on
OAuth wikis, since "everyone" (including an api request by an OAuth consumer)
may not be able to do everything.

However, lots of places in the code, we use User::isEveryoneAllowed( 'read' )
to decide if this is a private wiki, and if so, disable caching (ApiMain,
RawAction) or do more extensive checks (Title).

I'm worried enabling OAuth may have larger performance impact in general.
Should onUserIsEveryoneAllowed return true for 'read' if the wiki is public?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to