API allows suppression of redirects by users without the "suppressredirect" right
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	He7d3r
	Nov 26 2014, 10:33 AM

Description

The following pages were moved using the API:
https://pt.wikipedia.org/w/index.php?title=User:Reverta-me/Testes2&diff=prev&oldid=40709971
https://pt.wikipedia.org/w/index.php?diff=40708830
https://pt.wikipedia.org/w/index.php?diff=40708798
The users in question are not in a group which has the "suppressredirect" right, so the edits should have created a redirect, even if the API call specified "noredirect=1" and there should be a warning about that.

	Subject	Repo	Branch	Lines +/-
	API: Check suppressredirect right in ApiMove	mediawiki/core	master	+5 -0
	API: Check suppressredirect right in ApiMove	mediawiki/core	wmf/1.25wmf10	+5 -0

Mentioned In: rMW87c3c2fdf4d7: API: Check suppressredirect right in ApiMove
rMW56a12f8b57a0: API: Check suppressredirect right in ApiMove

He7d3r raised the priority of this task from to High.

He7d3r updated the task description. (Show Details)

He7d3r changed Security from none to None.

Looks like a regression from gerrit 166175 / Ic5026384b92a0d68d628397ffe1de6e5b6183f02

Seems there is no autolinking for gerrit changes at the moment: https://gerrit.wikimedia.org/r/#/c/166175/

Change 176036 had a related patch set uploaded (by Anomie):
API: Check suppressredirect right in ApiMove

Change 176038 had a related patch set uploaded (by Reedy):
API: Check suppressredirect right in ApiMove

Change 176036 merged by jenkins-bot:
API: Check suppressredirect right in ApiMove

Change 176038 merged by jenkins-bot:
API: Check suppressredirect right in ApiMove