Last modified: 2014-10-16 08:28:48 UTC
The bug was seen on Wikia (Special:Version states that version 1.16.5 is in use) and Wikipedia English (Special:Version states that version 1.18wmf-1 derived from r107965 is in use). Ending a page edit with the proper token in the API yields an error such as <error code="protectedpage" info="The ``protect'' right is required to edit this page" /> But ending a page upload with the proper token yields an error such as <error code="permissiondenied" info="Permission denied" /> I believe the permissiondenied code is inappropriate in this situation, because it is usually used to signify that the user does not have the right to perform this action regardless of page (for example, an anonymous user cannot upload files to the wiki). It should be the protectedpage code to signify that the user does have the right but cannot exercise it for specific protected (hence the name) pages.
