Page MenuHomePhabricator

Non-admins can edit the Commons Main Page
Closed, InvalidPublic

Description

Author: TheEvilIPaddress

Description:
On Commons, the Main Page ([[commons:Main Page]]) is protected edit:sysop, mopve:sysop and cascading, but today someone who isn't an admin added this bullshit to the Main Page (http://commons.wikimedia.org/w/index.php?title=Main_Page&action=historysubmit&diff=33299797&oldid=32769943). As you can see at http://commons.wikimedia.org/wiki/Special:ListUsers/Mdale the user doesn't belong to any usergroup. Fortunately the guy immediately reverted it, but I find it very worrying that non-admins can edit the Main Page. I mean, the Main Page isn't protected for no reason, but to avoid such bullshit edits. I'd be happy if you could fix this problem within a short timeframe, because I don't want more bullshit on the Main Page.


Version: unspecified
Severity: enhancement

Details

Reference
bz21914

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:57 PM
bzimport set Reference to bz21914.
bzimport added a subscriber: Unknown Object (MLST).

Mdale is a staff member. See http://commons.wikimedia.org/w/index.php?title=Special:GlobalUsers&offset=Mdanahy&limit=1&username=Mdale .

Obviously something is very wrong here, whether it be that his account has been accessed by somebody else or a SUL issue or ... ?

CCing Michael so he can explain the edit :)

It seems likely that Michael made a mistake, as he reverted his edit immediately.

TheEvilIPaddress wrote:

Ah, he's a staff member, that explains it. Thanks.
(In reply to comment #4)

It seems likely that Michael made a mistake, as he reverted his edit
immediately.

I think so, too.

mdale wrote:

Yea sorry ... was 3:30 in the morning was testing the add-media-wizard and made a mistake. Won't happen again.