Page MenuHomePhabricator

AccessControl breaks Search when results contain access controlled page
Closed, InvalidPublic

Description

Author: dymben

Description:
If search results would have contained a restricted page, and the user is not logged in or not on the access list, instead of being shown search results (e.g. including a mix of unrestricted pages and one or more restricted pages,) the user is denied access entirely.

Choosing search keywords to find the same unrestricted pages but not the restricted pages too can be difficult. The impression the user gets is that searching the wiki is simply unreliable, decreasing the likelihood they will turn to the wiki next time they need to look something up.

While I see there are later versions of this control available, Debian only currently supports MediaWiki 1.19, so I could not easily check if the issue is resolved in a later version.

Please resolve, or advise what I can do to resolve this issue.

Thanks,
Ben


Version: REL1_21-branch
Severity: normal

Details

Reference
bz66596

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:26 AM
bzimport set Reference to bz66596.
bzimport added a subscriber: Unknown Object (MLST).
Aklapper triaged this task as Lowest priority.Dec 14 2014, 10:18 PM
Aklapper subscribed.
Kizule subscribed.

If the problem still occurs with a newer and supported version of MediaWiki, please set the status of this Phabricator task back to "Open" via the Add Action...Change Status dropdown, provide exact version information, and follow https://www.mediawiki.org/wiki/How_to_report_a_bug . Thanks!