Page MenuHomePhabricator

Moves circumvent the requirement to have createpagemainns
Open, Needs TriagePublic

Description

Users without the createpagemainns right but with the move right can create a page outside of the main namespace and move it to the main namespace.

This situation currently exists for confirmed users, but T213003: Autoconfirmed rights set by extensions are out of sync with confirmed seeks to resolve that.

From: T213003#4857057

Event Timeline

JJMC89 created this task.Jan 5 2019, 8:59 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 5 2019, 8:59 PM

This appears to be a bypass for T204016