When you add a right in Mediawiki to be used for page protecting, lets say founder, I've went to protect a page, and I've set editing to sysops only and move permissions to founders only. I've then created a account and only gave it sysop rights only, I was able to edit the move rights to a lower level. If a test account with admin rights can do it, so then any other administrator can.
Version: 1.14.x
Severity: major
charlie wrote:
This is a problem with his wiki host, YourWiki. I've instructed him to move his request to our Support Desk there. Changing to closed.
bretthillebrand wrote:
If you also add protect as a protection type that will stop this happening.
bretthillebrand wrote:
Yes , Example Given
$wgRestrictionLevels = array ( '', 'autoconfirmed', 'sysop', 'Staff' );
$wgRestrictionTypes = array( 'edit', 'move', 'delete', 'protect' );
Note how protection itself is a protection type.