Page MenuHomePhabricator

Don't allow a file import if the user is less than autoconfirmed
Closed, ResolvedPublic

Description

Motivation
Even though the FileExporter already checks the permission rights of the user, we want to make sure that the FileImporter only allows users with enough rights independent of where they come from.

Task
Before loading and after saving the FileExporter specialPage, check if the user is at least autoconfirmed. If they are not logged in, allow them to log in before being redirected to the specialPage. If they don't have enough rights, give them that error message.

Details

Related Changes in Gerrit:

Event Timeline

Addshore renamed this task from Don't allow a file move if the user is less than autoconfirmed to Don't allow a file import if the user is less than autoconfirmed.Mar 15 2017, 10:39 PM

So, this should probably use and check the built in mediawiki right "upload".
Thoughts @Lea_WMDE ?

This could probably actually be a configuration option with the default of 'upload' so that it can easily be altered at a later stage.

Configuration option with default 'upload' sounds great!

Change 344373 had a related patch set uploaded (by Addshore):
[mediawiki/extensions/FileImporter@master] Permission checks

https://gerrit.wikimedia.org/r/344373

Change 344373 merged by jenkins-bot:
[mediawiki/extensions/FileImporter@master] Permission checks

https://gerrit.wikimedia.org/r/344373

@Addshore I don't know either. o_O
It should be in done, right? I think we even demoed it..

Tobi_WMDE_SW claimed this task.
Tobi_WMDE_SW moved this task from Watching/Blocked/External to Demoed on the WMDE-TechWish board.