Page MenuHomePhabricator

Anonymous users can edit page protected with [edit=autoconfirmed]
Closed, InvalidPublic


In the url listed here, you can see user:דורית protected the page in march 14 2011, [edit=autoconfirmed], indefinite. As you can see anonymous user still edited the page. only after re-protect on May 16 2011, the page was protected.

Version: 1.17.x
Severity: normal



Event Timeline

bzimport raised the priority of this task from to High.Nov 21 2014, 11:34 PM
bzimport set Reference to bz29021.
bzimport added a subscriber: Unknown Object (MLST).

May 10, April 20, and March 17 hewiki dumps shows only the move protection in place for this page:

mysql> select * from page_restrictions where pr_page=14058;




1 row in set (0.01 sec)

Perhaps either something didn't save properly or the log line is unclear:

16:45, 14 March 2011 דורית (Talk | contribs) changed protection level for "כ"ך" [edit=autoconfirmed] (פוקעת 13:45, 21 במרץ 2011 (UTC)) [move=sysop] (בלתי מוגבל בזמן) ‏ (hist)

To clarify: shows that the protection was on February 10 2011, and anonymous users still edited the page later.

Is it possible that this is related to bug #27858 in some way?

(In reply to comment #3)

Is it possible that this is related to bug #27858 in some way?

I sincerely doubt it.

Bumping priority, either "High" or invalid. Low seems wrong.

Since this is all (so far) on hewiki, is it possible there is a misconfiguration?

need to check Special:Log if these pages were deleted and then undeleted

For comment 2, I'm confused. As far as I can tell the protection in that instance expired on the 24th, and the first anon edit after that protection event was on the 25th. (The diff shows an edit before that protection was applied, I think. RTL interfaces are confusing for feeble minded people like me used to LTR).

Of course that still leaves the original issue reported in comment 0 at large, but as I understand its only happened once (?)

Bawolff, you are right, I missed that. only comment 0 is the bug.

During triage, we thought that this might be the result of deleting
and then undeleting the page in question. Special:Log, though
( shows no such problem.

Going back to the log line quoted at the top: it says that the [edit=autoconfirmed] setting expires March 21, 2011, while the [move=sysop] setting is indefinite. ('expires' and 'march' are hardcoded into the log entry text in hebrew o_O)

The earlier protection on Feb 10 was against moves only.

So the behavior appears to be as expected, for what we see in the history: no surprising page moves, and no anonymous edits during the week March 14-21.

Bug 15897 covers the low-level stuff needed to improve the log display so we won't get lost in the mixed English-Hebrew text next time. ;)

thank you very much for the this comment brion. It sets all clear.
As many thanks others as well.