Don't allow non-admins to remove semi-protection from pages by just moving back and forth
Closed, DuplicatePublic
Actions

Assigned To

None

Authored By

	Poyekhali
	Jun 4 2016, 10:07 AM

Description

Please see T136792#2355255.

Steps to reproduce the issue:

Using your secondary account (that has no sysop rights), move the semi-protected page to another page.

Both pages now have semi-protection, if you will see.

At this point, you will see that only one page has semi-protection.

Now you will see that the semi-protection is gone, without even using the unprotect special page.

		Status	Subtype	Assigned	Task
					Restricted Task
		Duplicate		None	T137018 Don't allow non-admins to remove semi-protection from pages by just moving back and forth

Poyekhali set Security to Software security bug.Jun 4 2016, 10:08 AM

Poyekhali changed the visibility from "Public (No Login Required)" to "Custom Policy".

Adding subscribers from T128624

There's not much point in adding subscribers to the closed-as-duplicate task. Discussion should continue on the task that's open.

T128624 is now resolved, can this task be visible to the public now? Thanks.

Restricted Application removed a subscriber: Poyekhali. · View Herald TranscriptDec 22 2016, 3:35 AM

In T137018#2895437, @Pokefan95 wrote:

T128624 is now resolved, can this task be visible to the public now? Thanks.

Done.

Restricted Application removed a subscriber: Poyekhali. · View Herald TranscriptDec 22 2016, 6:15 AM