Page MenuHomePhabricator

Revisionundelete role should be created
Open, LowestPublic

Description

Just like the page deletion where the "delete" and "undelete" rights are separated, a separate role should be created called "revisionundelete". When a user attempts to change the visibility of a page in such a away that any component that was formerly hidden (text, summary or user/IP) will become visible, this right should be verified.

For those changes that only change visibility from visible to invisible (e.g. hiding the username of an edit the summary of which was formerly hidden), only the revisiondelete right should suffice.

Event Timeline

Huji created this task.Mar 7 2016, 6:45 PM
Restricted Application added subscribers: JEumerus, Aklapper. · View Herald TranscriptMar 7 2016, 6:45 PM
Aklapper triaged this task as Low priority.Mar 8 2016, 1:24 PM
lfaraone lowered the priority of this task from Low to Lowest.Mar 11 2016, 2:43 AM
lfaraone added a subscriber: lfaraone.

I imagine for most purposes the auditability of the deletion log prevents abuse here. The amount of work involved to implement this request correctly makes me sceptical that it's worthwhile.