Last modified: 2014-09-01 09:36:25 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T56183, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 54183 - Current collection is not purged after logout
Current collection is not purged after logout
Status: NEW
Product: MediaWiki extensions
Classification: Unclassified
Collection (Other open bugs)
master
All All
: Low minor (vote)
: ---
Assigned To: Nobody - You can work on this!
: easy
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-09-16 20:22 UTC by Marcin Cieślak
Modified: 2014-09-01 09:36 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Marcin Cieślak 2013-09-16 20:22:20 UTC
1. Login as user A
2. Start creating book using Special:Book, add one page
3. Logout
4. Login as user B
5. Go to Special:Book

you will see the page added by user A in the Special:Book

While collaboration should be encouraged (see bug 44185) I think this is pretty
unexpected.
Comment 1 Nemo 2014-04-24 16:33:27 UTC
To clarify, this is about the current (non-saved) collection in the process of being gathered, not about the actual output. The collection, when submitted for rendering, is only accessible at an URL containing something like collection_id=64d6f54fa718e186 (safer than most passwords).
Comment 2 Marcin Cieślak 2014-04-25 09:21:31 UTC
Fully agree, thanks. I actually wonder how much this is an actual problem. One could imagine for example, that anonymous user has this feature enabled as well and then this kind of behavior is correct (same set of pages available regardless whether logged in or out).
Comment 3 Nemo 2014-04-25 09:34:45 UTC
(In reply to Marcin Cieślak from comment #2)
> I actually wonder how much this is an actual problem.

I was tempted to close it invalid/wontfix. :) As currently phrased I think it's valid in principle, but I don't know what expectations registered users with shared computers have.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links