Page MenuHomePhabricator

undelete permission doesn't actually let you undelete
Open, MediumPublic

Description

Author: mike.lifeguard+bugs

Description:
Signed in as a user with the undelete right (also browsearchive, deletedhistory, but not deletedtext), I cannot undelete the page.


Version: 1.16.x
Severity: normal
URL: http://en.wikipedia.org/wiki/Special:Undelete/ZNC_(IRC_bouncer)

Details

Reference
bz21076

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:52 PM
bzimport set Reference to bz21076.
bzimport added a subscriber: Unknown Object (MLST).

What user account? Sysops should already have deletedtext

mike.lifeguard+bugs wrote:

(In reply to comment #1)

What user account? Sysops should already have deletedtext

Steward accounts have an arbitrary set of permissions as members of a global group.

Seems like stewards need deletedtext then

mike.lifeguard+bugs wrote:

(In reply to comment #3)

Seems like stewards need deletedtext then

That's my point - the undelete right isn't sufficient to undelete. Something is wrong with that. Granted, it makes little sense to have the ability to undelete a page without the ability to view the deleted content, but that's what the userright is advertised as.

dan.bolser wrote:

I found that, indeed, undelete now implies deletedtext as suggested by this fix, however, undelete does not imply deletedhistory, leading to exactly the same issue as described here, namely, a user with the undelete permission may not be able to delete a page.

1.17.0 (r96975)

dan.bolser wrote:

P.S. I started this page to help document Special:Undelete
http://www.mediawiki.org/wiki/Help:Undelete