Page MenuHomePhabricator

Protection against page moves does not really work
Closed, ResolvedPublic

Description

Author: beesley

Description:
Since 1.4, there is an option to "Protect from moves only". Choosing this option
does nothing more than hide the "move" link from non-admins. They can still go
to the page move URL such as
http://notreal.wikicities.com/index.php?title=Special:Movepage&target=Main_Page
and move a page that way.


Version: 1.4.x
Severity: normal
URL: http://notreal.wikicities.com/index.php?title=Main_Page&action=history

Details

Reference
bz1193
TitleReferenceAuthorSource BranchDest Branch
middleware: Implement storage update hookrepos/content-transform/nodejs-cassandra-storage!8jgiannelospurge-pregenerationmain
Add repos/releng/blubber to projectsrepos/releng/gitlab-trusted-runner!2dduvallreview/add-blubbermain
ci: Build and publish buildkit variantrepos/releng/blubber!4dduvallreview/create-gitlab-ci-configurationmain
Customize query in GitLab

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 8:00 PM
bzimport set Reference to bz1193.
bzimport added a subscriber: Unknown Object (MLST).

The actual move code was only checking the edit permission, not the move permission. Fixed.