Web browser: ---
            Bug ID: 60616
           Summary: Annotations from anonymous users can't be
           Product: MediaWiki extensions
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: Unprioritized
         Component: Annotator
    Classification: Unclassified
   Mobile Platform: ---

Annotations from anonymous users are stored with user id 0. However, the code
for updating/deleting annotations checks for user id identity so even logged in
users can only edit their own comments. This could result in undeleteable,
uneditable  offensive comments all over the wiki.

My proposal for this would be new permissions named "updateannotation" and
"deleteannotation" assigned to the sysop user by default. These permissions
would allow to bypass the "only update/delete your own annotation" restriction.

You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
Wikibugs-l mailing list

Reply via email to