Page MenuHomePhabricator

Special:Nuke exception: Errors: Insufficient permissions to execute this action. Called from Flow\Hooks::onNukeDeletePage
Closed, DeclinedPublicPRODUCTION ERROR

Description

Error message
PHP Warning: Failed to delete Topic:W38ae0n5ynb5xwyg. Errors: Insufficient permissions to execute this action. [Called from Flow\Hooks::onNukeDeletePage in /srv/mediawiki/php-1.36.0-wmf.30/extensions/Flow/includes/Hooks.php at line 2096]
Trace
from /srv/mediawiki/php-1.36.0-wmf.30/includes/debug/MWDebug.php(499)
#0 [internal function]: MWExceptionHandler::handleError(integer, string, string, integer, array)
#1 /srv/mediawiki/php-1.36.0-wmf.30/includes/debug/MWDebug.php(499): trigger_error(string, integer)
#2 /srv/mediawiki/php-1.36.0-wmf.30/includes/debug/MWDebug.php(196): MWDebug::sendMessage(string, string, integer)
#3 /srv/mediawiki/php-1.36.0-wmf.30/includes/GlobalFunctions.php(1095): MWDebug::warning(string, integer, integer, string)
#4 /srv/mediawiki/php-1.36.0-wmf.30/extensions/Flow/includes/Hooks.php(2096): wfLogWarning(string)
#5 /srv/mediawiki/php-1.36.0-wmf.30/includes/HookContainer/HookContainer.php(333): Flow\Hooks::onNukeDeletePage(Title, string, boolean)
#6 /srv/mediawiki/php-1.36.0-wmf.30/includes/HookContainer/HookContainer.php(140): MediaWiki\HookContainer\HookContainer->callLegacyHook(string, array, array, array)
#7 /srv/mediawiki/php-1.36.0-wmf.30/extensions/Nuke/includes/hook/NukeHookRunner.php(35): MediaWiki\HookContainer\HookContainer->run(string, array)
#8 /srv/mediawiki/php-1.36.0-wmf.30/extensions/Nuke/includes/SpecialNuke.php(342): NukeHookRunner->onNukeDeletePage(Title, string, boolean)
#9 /srv/mediawiki/php-1.36.0-wmf.30/extensions/Nuke/includes/SpecialNuke.php(70): SpecialNuke->doDelete(array, string)
#10 /srv/mediawiki/php-1.36.0-wmf.30/includes/specialpage/SpecialPage.php(645): SpecialNuke->execute(NULL)
#11 /srv/mediawiki/php-1.36.0-wmf.30/includes/specialpage/SpecialPageFactory.php(1405): SpecialPage->run(NULL)
#12 /srv/mediawiki/php-1.36.0-wmf.30/includes/MediaWiki.php(310): MediaWiki\SpecialPage\SpecialPageFactory->executePath(Title, RequestContext)
#13 /srv/mediawiki/php-1.36.0-wmf.30/includes/MediaWiki.php(944): MediaWiki->performRequest()
#14 /srv/mediawiki/php-1.36.0-wmf.30/includes/MediaWiki.php(548): MediaWiki->main()
#15 /srv/mediawiki/php-1.36.0-wmf.30/index.php(53): MediaWiki->run()
#16 /srv/mediawiki/php-1.36.0-wmf.30/index.php(46): wfIndexMain()
#17 /srv/mediawiki/w/index.php(3): require(string)
#18 {main}
Impact

Happened once when a user tried https://www.mediawiki.org/w/index.php?title=Special:Nuke&target=Istanadomino

Flow complains about lack of permission?

Notes

Details

Request ID
YCT9yJc-ONuzfsQ7kw-VXgAAAFY
Request URL
https://www.mediawiki.org/w/index.php?title=Special:Nuke&action=delete

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

That is an attempt to delete all contributions of a spam user https://www.mediawiki.org/wiki/Special:Contributions/Istanadomino

The Special:Nuke page shows two topics:

  • Topic:w38ae0n5ynb5xwyg (view changes)
  • Topic:w38a5d375vjs5nxo (view changes)

I guess the acting user has permissions for Special:Nuke but lacks permissions to delete Flow topic. So sounds like a configuration error maybe.

The error resulted in Flow spam remaining un-nuked: https://www.mediawiki.org/wiki/Topic:W38ae0n5ynb5xwyg (not sure if the nuking admin even learns about this).

Only admins have the nuke permission on mw.org and they also have flow-delete which should cover deleting topics so at a glance permission config seems sane.

Why is this a PHP warning? That seems wrong (but maybe that's just Nuke having poor logging?).

I can't delete that thread as an admin. Maybe because the full talk page was deleted and after that you can't delete individual threads?

If it only affects deleted pages, user impact is minimal, at least.

Did not repeat in the last 90 days.

If it only affects deleted pages, user impact is minimal, at least.

If that's the case, this can be safely ignored IMO - there are better places than Flow to invest energy into.
If it does affect visible pages and prevents spam removal from such pages, that's a problem, but we can re-examine it if it turns out to be the case.