Last modified: 2013-10-21 21:58:11 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T27059, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 25059 - Admins can delete pages that they can't edit
Admins can delete pages that they can't edit
Status: NEW
Product: MediaWiki
Classification: Unclassified
Page protection (Other open bugs)
unspecified
All All
: Low enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-09-04 22:54 UTC by Kudu
Modified: 2013-10-21 21:58 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Kudu 2010-09-04 22:54:11 UTC
When you set up a custom protection level that isn't available to users that don't have special user groups apart from admins, admins can still delete those pages.

For example, if you create a "restricted" protection level and give the right to edit those pages to the "restricted" user group, admins (probably because they have the protect and delete rights) who aren't in the "restricted" group won't be able to edit pages that are protected at the "restricted" level, but they'll be able to delete them.
Comment 1 Aryeh Gregor (not reading bugmail, please e-mail directly) 2010-09-17 22:30:35 UTC
MediaWiki isn't really designed for this level of permissions granularity, so probably no one wants to bother fixing this.  Someone (not me) might be willing to review patches if you're willing to write them.
Comment 2 Kudu 2011-07-05 01:04:01 UTC
There are still some other restrictions as to manipulating pages which you can't edit as an admin. For example, admins can't change the protection levels for pages they can't edit. However, they could delete the page, and restore it, to strip the protection.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links