See parent task
Codesearch for userCan calls: https://codesearch.wmflabs.org/deployed/?q=-%3EuserCan%5C(&i=nope&files=php%24&repos=
These need to be checked for if they are called on a title method
Calls to Title::userCan:
- From core
- Title::quickUserCan
- TitlePermissionTest (lots)
- TitleTest::testWgWhitelistReadRegexp
- From FlaggedRevs https://gerrit.wikimedia.org/r/c/572030
- RevisionReviewForm::isAllowed
- From MassMessage https://gerrit.wikimedia.org/r/c/572073
- SpecialCreateMassMessageList::onSubmit
- SpecialEditMassMessageList::setParameter
- From Translate https://gerrit.wikimedia.org/r/c/572075
- PageTranslationTaggingTest::testTranslationPageRestrictions
- TranslateSandboxTest::testPermissions
- From GettingStarted https://gerrit.wikimedia.org/r/c/571875
- BasePageFilter::isAllowedPage
- From Jade: https://gerrit.wikimedia.org/r/c/572029
- PageEntityProposalSetStorage::storeProposalSet
- From LiquidThreads https://gerrit.wikimedia.org/r/c/571874
- Thread::canUserCreateThreads
- From SubPageList3 https://gerrit.wikimedia.org/r/c/571873
- SubPageList3::getTitles
All other callers from mediawiki deployed code refer to a different userCan (eg PermissionManager::userCan)