User with "ipblock-exempt" permission could not create account
Closed, DuplicatePublicBUG REPORT
Actions

Assigned To

None

Authored By

	Stang
	May 16 2022, 2:23 PM

Description

List of steps to reproduce (step by step, including full links if applicable):

Assume your account has ipblock-exempt permission applied, and you're editing from a hard-blocked IP
Visit Special:CreateAccount, provide a random non-existed username intend to create in "Username" input field
Click another random input field

What happens?:
You will see a notice said "Your username or IP address has been blocked", and it is impossible to create a new account.

What should have happened instead?:
You should not, as you already have ipblock-exempt permission.

Software version (if not a Wikimedia wiki), browser information, screenshots, other information, etc.:
1.39.0-wmf.10 (6139f98)

A quick summary of what I have dug up:

Try to create accounts via api causes the same error.
$this->authManager->beginAccountCreation() called by includes/api/ApiAMCreateAccount.php:105 to create an account
$provider->testUserForCreation() called by includes/auth/AuthManager.php:1078 to check if we are denied by one of the providers
We are denied by includes/auth/CheckBlocksSecondaryAuthenticationProvider.php because we have been blocked so $user->isBlockedFromCreateAccount() in L79 got the block.

Not sure why is this only causing issues recently though.