Page MenuHomePhabricator

🤖️ Check the 'bot' user privilege in REST API's ItemUpdater
Closed, ResolvedPublicSecurity

Description

Note: the Wikibase REST API isn’t enabled in production yet, no need to panic :)

MediaWikiEditEntityFactoryItemUpdater should throw an exception in case it gets an EditMetadata object with the bot flag set to true but with a user who doesn't have the corresponding right.