Page MenuHomePhabricator

Enforce permission checks when editing Lexeme
Closed, ResolvedPublic5 Estimated Story Points


Editing a Lexeme must only be possible by accounts with the "edit" right.

Acceptance criteria

  • A user without the "edit" right can not edit any part of a Lexeme


Scenario: Not authorized

GIVEN I am on the Lexeme page
WHEN I do not have the "edit" right
THEN I see no edit buttons

Scenario: Authorization revoked after page load

GIVEN I am on the Lexeme page
AND I do not have the "edit" right
AND I see edit buttons
WHEN I edit something
AND I submit changes
THEN Show the error message from the API (the general error handling in Wikibase) at the save button


Event Timeline

WMDE-leszek created this task.
WMDE-leszek set the point value for this task to 5.Mar 13 2018, 11:40 AM
Jakob_WMDE added a subscriber: Jakob_WMDE.