Page MenuHomePhabricator

🤖️ Create middleware to check `bot` user right
Closed, ResolvedPublicSecurity

Description

Create a middleware that returns an error response if the request has the bot flag set to true but the user doesn't have the corresponding right.
The error response should be the generic rest-write-denied.

Note: the Wikibase REST API isn’t enabled in production yet, no need to panic :)