The current user's permissions depend on Session::getAllowedUserRights. To achieve this without the need to rely on global state, PermissionManager needs access to the current user's Session, and perhaps should have it (or the user name and set of allowed rights) injected.
See also T218555: Provide access to WebRequest and associated information via a service object.
See also T231930: Introduce Authority objects to represent the user performing a given action.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T208764 Remove cyclic dependency between Title and User classes | |||
| Declined | • Pchelolo | T220191 Remove calls to deprecated methods in Title and User with calls to the new PermissionManager service. | |||
| Declined | None | T223295 Make PermissionManager aware of the current user's session. | |||
| Resolved | Vedmaka | T218558 Move User::getRights and related methods into PermissionManager | |||
| Resolved | Vedmaka | T208768 Create a PermissionManager service |
Removing task assignee due to inactivity, as this open task has been assigned for more than two years (see emails sent to assignee on May26 and Jun17, and T270544). Please assign this task to yourself again if you still realistically [plan to] work on this task - it would be very welcome!
(See https://www.mediawiki.org/wiki/Bug_management/Assignee_cleanup for tips how to best manage your individual work in Phabricator.)