https://bugzilla.wikimedia.org/show_bug.cgi?id=67082

Bartosz Dziewoński <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #3 from Bartosz Dziewoński <[email protected]> ---
(In reply to Chris Steipp from comment #2)
> So yes, the game would have the ability to delete pages, if an admin decides
> to play it. The appropriate thing to do would be to register and use another
> consumer, that requests fewer rights.

The game's "Merge items" mode can actually delete pages for you, if you're an
admin and check an additional checkbox.


Maybe the dialog shouldn't list the rights that the user doesn't have anyway?
(For example, I can confirm that "Delete pages, revisions, and log entries" is
shown even if the user is not an admin, which is definitely confusing.)
Would that require us to invalidate the OAuth permissions when the user gets
these rights, just in case?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to