Last modified: 2010-07-04 17:19:39 UTC
ApiQueryRecentChanges checks only for 'patrol' permission, when rcprop=patrolled is given, instead it should use $wgUser->useRCPatrol(), which checks all related rights.
Fixed in r420777. Checking useRCPatrol() isn't enough, though, because new pages patrolling can be enabled independently. list=recentchanges now requires at least one of useRCPatrol() and useNPPatrol() to return true for obtaining patrol data.
(In reply to comment #1) > Fixed in r420777 Obviously, that should be r42077.