Last modified: 2013-09-26 12:13:40 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T56442, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 54442 - Changing the visibility of the article feedback tool does not respect protection level
Changing the visibility of the article feedback tool does not respect protect...
Status: RESOLVED INVALID
Product: MediaWiki extensions
Classification: Unclassified
ArticleFeedbackv5 (Other open bugs)
unspecified
All All
: Low normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-09-21 22:36 UTC by Redrose64
Modified: 2013-09-26 12:13 UTC (History)
2 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Redrose64 2013-09-21 22:36:42 UTC
Users without the sysop right can apparently change the visibility of the article feedback tool on fully-protected pages. See http://en.wikipedia.org/w/index.php?title=Special:Log&page=Wikipedia%3AFile+Upload+Wizard and discussion at http://en.wikipedia.org/wiki/Wikipedia_talk:File_Upload_Wizard#Edit_request_on_21_September_2013
Comment 1 Jackmcbarn 2013-09-21 22:44:48 UTC
In the protection interface, article feedback has a separate setting from editing. Prior to the update that added logging to feedback toggles, this wasn't automatically set when pages were protected, but it is now, so in essence this is already fixed.
Comment 2 Matthias Mullie 2013-09-26 12:13:40 UTC
Users without sysop rights can indeed change the visibility of AFTv5, but not via ?action=protect, and only a limited (aft-reader|aft-editor) subset of options.

They can only change visibility (enable|disable) via the links outlined in these feature requirements: http://www.mediawiki.org/wiki/Article_feedback/Version_5/Feature_Requirements#Enable_feedback_from_the_article_page

In the background, this will trigger the same change as the corresponding change via ?action=protect would (apart from not having all detailed protection options) & it will write a similar line to the log (which may be confusing, but probably less confusing than having separate mechanisms)

If a sysop changes the protection to something higher-level (like aft-administrator), normal users can not override this.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links