Page MenuHomePhabricator

Should SpecialPages that return true for ::requireLogin allow access to temporary users?
Open, In Progress, Needs TriagePublic1 Estimated Story Points

Description

SpecialPage::requireLogin can be overridden to return true, which denies access for logged out (anon/IP) users. However, it still allows access to temporary users.

To deny access to temporary users, SpecialPage::requireNamedUser should return true.

We should check whether special pages that return true for requireLogin should be available to temporary users. If not, we should update them to return true for requireNamedUser instead.

Note: Some SpecialPages in core have already been updated. Extension SpecialPages may need updating too.

Related Objects

Event Timeline

As with everything else for MVP, I'd say that access should be the same as for anon/IP.

AGueyte set the point value for this task to 1.Aug 23 2023, 2:58 PM
Aklapper added a subscriber: AGueyte.

Removing inactive task assignee (please do so as part of offboarding steps).