Last modified: 2012-02-28 01:32:05 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T36209, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 34209 - 'upload'-only protection does not work for file reversions
'upload'-only protection does not work for file reversions
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
Page protection (Other open bugs)
1.18.x
All All
: Normal normal (vote)
: ---
Assigned To: howief
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-02-05 13:59 UTC by Saibo
Modified: 2012-02-28 01:32 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Saibo 2012-02-05 13:59:10 UTC
... only protecting against uploads (and file version reverts) is a low side-effects measure against edit/upload wars. However it doesn't seem to work.


Does somebody know if that is a bug or a feature? http://commons.wikimedia.org/w/index.php?title=File:AaatestSonnepalmenstrand-portrait_new.jpg&action=history  The page is upload=sysop protected and it works (I cannot upload with my test account). But the testaccount can revert to another file version. This is pretty stupid since I thought it isn't enough at upload edit wars to upload protect ([[COM:P]] should be adjusted then)...  Also that is a bad choice for high-visibility files which have more than one version. Mediawiki displays the reverts as "uploads" - but apparently doesn't apply the protection status.  I would have assumed that it protects against that reverts.  First because it is useful, second because mediawiki [//commons.wikimedia.org/w/index.php?title=Special:Log&page=File%3AAaatestSonnepalmenstrand-portrait+new.jpg titles the reverts as uploads in the logs]   Asked in Wikimedia tech channel on IRC but got no answer.

I tried again at "my" file: [[:File:AaatestSonnepalmenstrand-portrait_new.jpg#filehistory]]  Of, course - still the same.  

User:Bidgee in [[commons:COM:VP#upload protection doesn't work for reverts]] seemed to agree that this is a bug and not a feature.
Comment 1 Rob Lanphier 2012-02-24 21:38:41 UTC
Let me make sure I understand this correctly.  In order to fully protect an image page, one needs to separately apply restriction on upload, and another restriction on edit.  You're making the case that that should be a one step process, correct?

I'd like to get Howie's take on the priority of this.
Comment 2 Aaron Schulz 2012-02-24 22:25:13 UTC
Testing locally I get:
"You do not have permission to upload this file, for the following reason: 

This page has been protected to prevent editing."

...when trying to revert a page with 'upload' protection to 'sysop' as a non-privileged user.
Comment 3 Saibo 2012-02-25 20:22:12 UTC
note: my original title was: "upload protection doesn't work for reverts → edit wars can continue if not also edit protection is used". If you change it please mention that you did. Also my first comment begins with "...".

No, I do not mean this title someone gave this bug. 

I mean that if a page if protected with "upload=sysop" then file version reverts should only be possible by sysops. According to my test they are possible also without a sysop bit.
Comment 4 Aaron Schulz 2012-02-27 20:42:10 UTC
(In reply to comment #2)
> Testing locally I get:
> "You do not have permission to upload this file, for the following reason: 
> 
> This page has been protected to prevent editing."
> 
> ...when trying to revert a page with 'upload' protection to 'sysop' as a
> non-privileged user.

Note that this is with no 'edit' nor 'move' protection. I can't reproduce this on my checkout of wmf1.19 as well as trunk. Maybe it's an extension problem?
Comment 5 Aaron Schulz 2012-02-27 21:22:15 UTC
Couldn't reproduce at http://test.wikipedia.org/w/index.php?title=File:Rotato_test.JPG either.
Comment 6 Saibo 2012-02-27 23:52:41 UTC
Here was so long no comment that I forgot that I used this file as test case here and had unprotected in the meantime - sorry. So the file was not protected at Platonides test file revert.  http://commons.wikimedia.org/w/index.php?title=Special:Log&page=File%3AAaatestSonnepalmenstrand-portrait+new.jpg

However, I have tested now again with a non-admin account: now reverting is not possible anymore at this Commons file (Commons runs MW 1.19).

At de.wikipedia (until 2012-03-01 on 1.18) the revert still is possible despite upload protecting. http://de.wikipedia.org/wiki/Datei:Logo_African_Pygmy_Goat.png  So that seems to have been silently fixed with 1.19... http://de.wikipedia.org/w/index.php?title=Datei:Logo_African_Pygmy_Goat.png&diff=100231158&oldid=100231137
Comment 7 Aaron Schulz 2012-02-28 01:32:05 UTC
Closing fixed.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links