Page MenuHomePhabricator

Protection against page moves does not really work
Closed, ResolvedPublic

Description

Author: beesley

Description:
Since 1.4, there is an option to "Protect from moves only". Choosing this option
does nothing more than hide the "move" link from non-admins. They can still go
to the page move URL such as
http://notreal.wikicities.com/index.php?title=Special:Movepage&target=Main_Page
and move a page that way.


Version: 1.4.x
Severity: normal
URL: http://notreal.wikicities.com/index.php?title=Main_Page&action=history

Details

Reference
bz1193

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 8:00 PM
bzimport set Reference to bz1193.
bzimport added a subscriber: Unknown Object (MLST).

The actual move code was only checking the edit permission, not the move permission. Fixed.