Page MenuHomePhabricator

Unauthorized people can subscribe to "changes of documents" notification
Open, HighPublic

Description

Problem

You can add yourself as a subscriber of document changes, even you are unauthorized to see the documents.

Proposed solution

Prohibit users who do not have permission to see documents to subscribe to document changes.

Student is expected to send a patch for wikimedia-cz/tracker repository, hosted at Wikimedia Gerrit. When claiming task on GCI website, student should claim a respective Phabricator task as well.

Materials

Event Timeline

Janbery created this task.Nov 22 2019, 8:01 PM
Urbanecm renamed this task from unauthorized people can see changes of documents to Unauthorized people can subscribe to "changes of documents" notification.Nov 24 2019, 7:35 PM
Urbanecm updated the task description. (Show Details)
Safan41 claimed this task.Jan 2 2020, 2:37 AM
Urbanecm removed Safan41 as the assignee of this task.Jul 21 2020, 10:21 PM
Urbanecm added a subscriber: Safan41.
Urbanecm triaged this task as High priority.Jul 21 2020, 10:26 PM