We should have a selenium tests that makes sure that items can not be viewed if the user does not have the read permission. This should be done at least for normal pages views, history views, and diffs. It could possibly also cover action=raw (currently completely disabled), Special:Export, and API modules for listing revisions, rendering pages, etc.
|Resolved||• Jonas||T88541 [DO NOT USE] Wikidata Browsertests (tracking) [superseded by #Browser-Tests]|
|Declined||None||T42723 [Task] Browsertests for read permission|
Going to close this 4+ year old ancient ticket as we may not even want these things now.
We have a new story that will be taking a fresh look at our tests.
If we decide we want these things, new tasks would be created or reopened etc.
T226975: [Story] Restructuring Wikibase extension tests