https://bugzilla.wikimedia.org/show_bug.cgi?id=66624

--- Comment #13 from Sage Ross <[email protected]> ---
Kunal's patch (not yet merged) should prevent this specific problem from
happening again.

The underlying issue of user 0 sneaking into the database is still a mystery to
me. The permissions patch makes it more explicit that anons should not be able
to enroll, but there was already a check for users being logged in before
enrollment.

Maybe there's some way to sneak an anon through special:enroll, or maybe
there's another unusually way of enrolling an anon (such as the "add students"
feature available to logged in users.)

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to