https://bugzilla.wikimedia.org/show_bug.cgi?id=27152
Summary: Using $wgRevokePermissions doesn't revoke protection permissions when the 'editprotected' permission is assigned Product: MediaWiki Version: unspecified Platform: All OS/Version: All Status: NEW Severity: minor Priority: Normal Component: Page protection AssignedTo: wikibugs-l@lists.wikimedia.org ReportedBy: wweraw...@hotmail.com If a user group is given the 'editprotected' right, and then a specific protection right is revoked, the revoking doesn't work. For example: $wgGroupPermissions['mygroup']['editprotected'] = true; $wgRevokePermissions['mygroup']['mylevel'] = true; I would expect that in this case, if a page was protected to the 'mylevel' level, then the 'mygroup' group would not be able to edit that page. The actual outcome is that revoking the 'mylevel' right has no affect. In addition, if the 'mygroup' group also has the 'protect' permission, they can unprotect the page to a lower level. For example: $wgGroupPermissions['mygroup']['protect'] = true; $wgGroupPermissions['mygroup']['editprotected'] = true; $wgGroupPermissions['mygroup']['someotherlevel'] = true; $wgRevokePermissions['mygroup']['mylevel'] = true; I would expect that in this case, if a page was protected to the 'mylevel' level, then the 'mygroup' group would not be able to unprotect the page. The actual outcome is that they can unprotect it, and/or change the protection level to 'someotherlevel', which in my case is a lower level. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l