Description
For a given request ensure that page read permission is performed for given user.
Requirement
- Ensure that read permission is checked for a given page for a given user
- Add integration test for behaviour
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Invalid | None | T229661 Core REST API in MediaWiki | |||
| Resolved | • eprodromou | T231338 Page history API | |||
| Resolved | • eprodromou | T231347 Curator compares revisions | |||
| Resolved | tstarling | T231580 Implement GET Revision Comparison | |||
| Resolved | • eprodromou | T235663 For Compare Revision Endpoint check for page read permission |
Event Timeline
Comment Actions
Updated the documentation with a 403 response for this endpoint. (Compare revisions docs)
Comment Actions
@Pchelolo what's the best way for me to confirm this as done on the beta cluster? I think this might work:
- Create a new page
- Edit it a few time to get some history
- Delete it (as an admin which I don't think I am)
- Run the comparison as a regular user
Is there a better way?
Comment Actions
This is not about the deleted page, this is about a restricted 'read' permission and we need a private wiki for that ($wgGroupPermissions['*']['read'] = false), but I don't see a private wiki in beta...