Last modified: 2014-08-16 19:57:59 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T50609, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 48609 - After removing your own UserRights, you get an error message "You do not have permission to do that"
After removing your own UserRights, you get an error message "You do not have...
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
Special pages (Other open bugs)
1.19.6
All All
: Lowest enhancement (vote)
: ---
Assigned To: Alexandre Emsenhuber [IAlex]
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-05-19 03:33 UTC by Stephen Lafleur
Modified: 2014-08-16 19:57 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Stephen Lafleur 2013-05-19 03:33:04 UTC
When you change a user's rights using Special:UserRights/UsernameXXX, you returns to Special:UserRights/UsernameXXX. There is no indication that anything has changed, except for check marks by the new groups, and a new item in the log.

Suppose the user UsernameXXX modifies his own userrights and saves. He is brought back to Special:UserRights/UsernameXXX.

However, if he has removed his own admin rights and no longer has userrights priveleges, then upon returning to the page, he is presented with an error: "You do not have permission to do that, for the following reason: Your account does not have permission to add or remove user rights."

Since he *just* clicked the button to modify his own userrights, and has recieved no affirmation of that, he becomes confused because it very much seems like he has failed to remove his own rights.


Can we add a confirmation page of some sort to avoid these situations?
Comment 1 Andre Klapper 2013-05-29 14:12:37 UTC
But what exactly is confusing about the message?

I propose WONTFIX for this. Rare cornercase, plus people should think for a short moment about the consequences if they really want to remove rights from their own account.
Comment 2 Stephen Lafleur 2013-05-29 18:33:34 UTC
(In reply to comment #1)
> But what exactly is confusing about the message?
> 
> I propose WONTFIX for this. Rare cornercase, plus people should think for a
> short moment about the consequences if they really want to remove rights from
> their own account.

1. Click button
2. Receive no confirmation message
3. "You do not have permission to do that, for the following reason: ..."

You see *no* potential for confusion in inexperienced users?

---

Note that I say "inexperienced".  I will concede that this would probably be a corner case on a wiki like Wikipedia, for example, where only the most trusted, experienced users would have the necessary userrights, and they would very rarely find themselves in a position to self-demote.

But I frequent Wikia more than I do Wikipedia, and on Wikia it is more of an issue. By default, end users of Wikia only have three user rights available to promote: sysop, bureaucrat, rollback.

Newbie users will create silly duplicate wikis about Pokémon, for example, and in a fit of enthusiasm promote random Wikians they meet who have zero edits on their wiki to admin+bureaucrat.

This can interfere with other aspects of Wikia (like adoption), so the user (who may be very inexperienced himself) goes to UserRights to demote himself, uninterested in the wiki, and finds himself in the trap I described.

---

As a last word, I take issue with your wording about consequences: you seem to be implying they'll jump the gun and regret it afterwards, which is not the issue being discussed.
Comment 3 Stephen Lafleur 2013-05-29 19:58:13 UTC
Building on my last comment, I should clarify that the silly Pokémon wiki is a tad of a corner case itself, but emphasize that self-demotion is a much more prevalent occurrence in general when we are discussing wiki farms.

I'm an experienced user, and I have found myself auto-demoting for various reasons, and even I have been confused by the message.
Comment 4 Gerrit Notification Bot 2013-06-03 08:50:31 UTC
Related URL: https://gerrit.wikimedia.org/r/66383 (Gerrit Change I4f42713ccec647b1d6ff11c2714d645973750579)
Comment 5 Alexandre Emsenhuber [IAlex] 2013-07-26 12:43:01 UTC
Change merged.
Comment 6 Stephen Lafleur 2013-09-25 00:03:20 UTC
Very late, but - let me provide an example of this bug in action, to retroactively justify its fix. Note that Wikia uses an old version of Mediawiki.

http://community.wikia.com/wiki/Thread:574680#34

User goes from "bureaucrat" to nothing and cannot read the page, gets confused.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links