Volunteer Developer, Beginner Security Engineer.
Alternative Account: @SnowDragon
This error is occurred due to pycodestyle 2.4.0 added checking for W605.
Thanks for comments all. but this ticket is not proposal for drop the local "steward" group or discussing how handles "remotely userrights change" system.
If you hope these,please file a new ticket.
I suppose the reason that the userrights right can't also go is local custom groups that don't appear on meta?
I removed URL-upload_(testing) group by removing membership from Bastique
Caban group member gug_user 99 is not exist.
@Reedy Thanks for deploy.
New version. Tested in all cases (anonymous/sysop/oversight user vs visible/deleted/oversighted element), and it seems to work.
This is an updated version which should also solve the discrepancy between deleted and suppressed revs. An important note: I haven't tested it! It should be tested in several cases: visible, deleted or suppressed revision, and basic/sysop/oversighter user.
This is my patch, where the examine part is copied from Rxy's patch (and slightly beautified). Also, please note that this vulnerability also affects Special:AbuseFilter/test (fixed by the change in AbuseFilterChangesList)
(file was updated, it wouldn't have passed CI, and that's the last thing we need).
Also, we should probably make a better distinction between deleted and suppressed stuff, but it's fine to merge this for the moment.
Thanks for explain that!
I wrote the patch for this.
I scheduled for deploy at Monday, October 08 11:00–12:00 UTC European Mid-day SWAT
What meaning of 'and the "validate" right'?
Thanks for take an action for pre-requirements and clarify .
On hold until 2018-10-06
https://en.wikipedia.org/w/api.php?action=query&meta=userinfo&uiprop=blockinfo%7Cgroups%7Crights%7Chasmsg is included global permission.
This is not my intention: "Allow add or remove interface-admin group by wikidata-staff" should only apply to their own account, not to arbitary accounts. However I'm not certain whether status quo is bad.
I scheduled for deploy in Monday, August 20 23:00–00:00 UTC
If I understand correctly this right every patroller or rollbacker on this wiki can now replace any page content with a REDIRECT tag, then be able to erase page history by moving another page on this one.