Page MenuHomePhabricator

🤖️ Create middleware to check `bot` user right
Closed, ResolvedPublicSecurity


Create a middleware that returns an error response if the request has the bot flag set to true but the user doesn't have the corresponding right.
The error response should be the generic rest-write-denied.

Note: the Wikibase REST API isn’t enabled in production yet, no need to panic :)