https://bugzilla.wikimedia.org/show_bug.cgi?id=69380
Stefan2 <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected]. | |jp --- Comment #23 from Stefan2 <[email protected]> --- (In reply to rschen7754.wiki from comment #2) > This had the effect of making it impossible for global sysops to delete > anything on login.wikimedia.org, since they cannot edit those pages but > loginwiki is in the GS set. As far as I can tell, no one can create pages on loginwiki, so why would pages ever have to be deleted? (In reply to Isarra from comment #15) > Requiring being able to edit a page to delete it doesn't make a whole lot of > sense in core: default MediaWiki comes with no situations in which anyone > would be able to delete anything they can't edit, and few MediaWiki installs > will have much reason to change the default structure in such a way. On the other hand, English Wikipedia's settings come with two interesting situations: * If you are an oversighter but not an administrator, then you can delete a protected page, but you can't edit protected pages. * If you are an importer but not an administrator, then you are maybe able to overwrite a protected page by uploading an XML file, but you can't edit the page normally. Has it been tested if this work? In both situations, you are in effect "editing" the page. If I do not have the right to edit a page, then I do not expect to be able to change what the page looks like at all. I should not be able to turn it into a "404 Not Found", and I should not be able to modify it by creating an XML file in my text editor. If Mediawiki allows such indirect editing, then Mediawiki seems to have a security bug. Of course, there is no situation where English Wikipedia would grant oversight rights to a non-admin, and the only importers are also admins. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
