Steps to replicate the issue (include links if applicable):
- Navigate to a wiki that set ContentTranslationPublishRequirements and where you're not in a required usergroup.
- Start a new translation or open an existing one.
- If opened an existing translation, please ensure the target is set to "new page" and not "personal draft" and exit and go back to the translation.
- If required, type something so that you'll not create an empty article.
- Click Publish.
What happens?:
The article is published even though you shouldn't be able to do that.
What should have happened instead?:
The user should be presented with an information that only more experienced users can publish translations directly.
Software version (on Special:Version page; skip for WMF-hosted wikis like Wikipedia):
Other information (browser name/version, screenshots, etc.):
When changing the target place, the user is forbidden to publish to mainspace. But after exiting the translation interface and coming back it's possible again to publish.
I've recorded the bug reproduction. There appears a warning about the source being outdated but it has no influence on the bug presence.
I've noticed the bug on plwiki after deploying T362756: [plwiki] Limit Content Translation publishing to mainspace for non-editors, but it's also present on eg. enwiki. On some wikis an abuse filter will prevent publication in such a scenario but we should be able to exclusively rely on the ContentTranslation configuration setting for that. Such a filter would normally act on plwiki as well but for demonstration purposes I've used a special test account that's exempt from the respective filter.