Original discussion here (PermaLink).

Based on the first example, extendedconfirmed is not the only right affected.

I think this is working as intended. The example cases were made by bots and Huggle, so the login was likely done using BotPasswords or OAuth, which limits the set of rights available to the user in that session.

@JJMC89: That makes sense, in theory. But is it really impossible to edit EC-protected pages from Huggle? If not, EC should still be part of the rights.

In T238270#5661958, @suffusion_of_yellow wrote:

@JJMC89: That makes sense, in theory. But is it really impossible to edit EC-protected pages from Huggle? If not, EC should still be part of the rights.

You can edit EC-protected page with Huggle if your Huggle BotPassword includes the editprotected grant.

Ok, that explains 25321331. I also don't see tboverride in user_rights, so it looks like GorillaWarfare didn't grant Huggle editprotected rights. This can probably be closed as invalid, but 'll leave that to Daimona.