Users without supression right should be able to revdel aspects of an edit that are not suppressed
Closed, DuplicatePublic
Actions

Assigned To

None

Authored By

	Huji
	Jul 1 2020, 3:08 PM

Description

Take an edit, and suppress its edit summary using an account with suppression right (i.e. Oversight).

Now, using another account that has revision deletion rights (i.e. Sysop) try to change the visibility of the username for that edit. You will get a permission error.

You do not have permission to review and restore hidden revisions, for the following reason:

The action you have requested is limited to users in the group: Oversighters.

While the sysop should not be able to see or change the visibility of the edit summary, they should still be able to see and change visibility of the revision text text or the username.

Related Objects

Mentioned In: T253462: Allow aspects of edits or logs to be revdeled while other aspects are suppressed

Event Timeline

Huji created this task.Jul 1 2020, 3:08 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 1 2020, 3:08 PM

Proc subscribed.Jul 1 2020, 3:17 PM

Huji added a project: User-Huji.Jul 1 2020, 7:25 PM

Having taken a quick look at this, seems to be due to the $item->canView() checks failing (eg at SpecialRevisionDelete::showForm, line 420). That function is in RevDelRevisionItem, line 81:

return RevisionRecord::userCanBitfield(
	$this->getRevisionRecord()->getVisibility(),
	RevisionRecord::DELETED_RESTRICTED,
	$this->list->getUser()
);

Would probably have to do a couple of bit checks, but seems do-able - the various different fields suppressed result in a different bit value. Perhaps in a duplicate function, since canView can't take a parameter.

DannyS712 subscribed.Jul 4 2020, 2:36 PM

DannyS712 closed this task as a duplicate of T253462: Allow aspects of edits or logs to be revdeled while other aspects are suppressed.Jul 4 2020, 2:40 PM

Huji mentioned this in T253462: Allow aspects of edits or logs to be revdeled while other aspects are suppressed.Jul 6 2020, 12:32 PM

Users without supression right should be able to revdel aspects of an edit that are not suppressedClosed, DuplicatePublicActions

Description

Related Objects

Event Timeline

Users without supression right should be able to revdel aspects of an edit that are not suppressed
Closed, DuplicatePublic
Actions