Even without having the +sysop permission, when you click on a URL (such as the
one provided), it will display the text "View or restore deleted edit(s)?," but
only when a filename has been passed through the URL; such as in this example,
with $wpDestFile=Bla.jpg. While clicking on it does return a "Admin only" page,
wouldn't it be better to not display that text at all? When I get to my
MediaWiki installation at work, I'll try to write up a patch and post it here.