Last modified: 2014-08-10 23:57:06 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T37238, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 35238 - The createpage right should allow creating pages even without the edit right
The createpage right should allow creating pages even without the edit right
Status: RESOLVED WONTFIX
Product: MediaWiki
Classification: Unclassified
Page editing (Other open bugs)
1.22.0
All All
: Low enhancement with 1 vote (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on: 69380
Blocks:
  Show dependency treegraph
 
Reported: 2012-03-15 03:12 UTC by jeffwang16
Modified: 2014-08-10 23:57 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description jeffwang16 2012-03-15 03:12:32 UTC
The installer's "authorized editors only" setting only blockades the rights "edit" or "createaccount", but the rights "createpage" and "createtalk" are not. I think this setting should be falsified for the installer. So

Right now:
# The following permissions were set based on your choice in the installer
$wgGroupPermissions['*']['createaccount'] = false;
$wgGroupPermissions['*']['edit']          = false;

Should change to:
# The following permissions were set based on your choice in the installer
$wgGroupPermissions['*']['createaccount'] = false;
$wgGroupPermissions['*']['edit']          = false;
$wgGroupPermissions['*']['createpage']    = false;
$wgGroupPermissions['*']['createtalk']    = false;
Comment 1 jeffwang16 2012-03-15 17:44:14 UTC
And not only that; img_auth.php should be applied and there should be an option to integrate img_auth.php with image uploading on the installer.
Comment 2 John Mark Vandenberg 2013-12-14 18:34:27 UTC
Hi Jeff,
I have tried this on v1.22 - the installer still adds
 
$wgGroupPermissions['*']['createaccount'] = false;
$wgGroupPermissions['*']['edit']          = false;

However I could create pages as an anon.

Can you still reproduce this bug ?
Comment 3 jeffwang16 2014-01-11 21:51:50 UTC
Well of course this is reproduce-able, but I'm not interested in making a new wiki for the purpose of testing.
Comment 4 Jackmcbarn 2014-01-14 18:23:59 UTC
I can't reproduce this issue with 1.22. Although the installer doesn't add lines prohibiting createpage and createtalk, anons are unable to do so.
Comment 5 jeffwang16 2014-01-14 21:01:13 UTC
No, we need somebody to change it so that it clearly adds the lines I requested.
Comment 6 Jackmcbarn 2014-01-14 21:04:09 UTC
Why? They're not necessary. The $wgGroupPermissions['*']['edit']          = false; line prevents page creation already. I just tested it. Adding the other lines would have no benefit and would just clutter up LocalSettings.php.
Comment 7 jeffwang16 2014-01-14 21:07:04 UTC
Permissions are supposed to tell EXACTLY what is blocked and what is not. Some wikis may even want anons to make pages only; the software is not supposed to bundle certain rights together.
Comment 8 Jackmcbarn 2014-01-14 21:08:52 UTC
I don't really see a use case for that, but I've updated the bug report to reflect it.
Comment 9 James Forrester 2014-08-10 23:57:06 UTC
Sorry, but I don't see a valid use case for a write-once-read-many medium using MediaWiki.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links