When an OAuth consumer with the “rollback” grant but without the “edit” grant attempts to roll back an edit, the following error ensues:
> mwapi.errors.APIError: permissiondenied: The action you have requested is limited to users in one of the groups: *, [[Wikidata:Users|Users]].
This error is highly confusing; it took @tgr and me a while to [figure out](https://discourse-mediawiki.wmflabs.org/t/permissiondenied-on-rollback-api/1005) that it’s because `WikiPage::doRollback() ` checks for both “edit” and “rollback”, and the groups mentioned in the error message are those of “edit”, even though the requested action is “rollback”.
Possible solutions I can think of:
- Continue to require both grants, but improve the error message and the documentation of the “rollback” grant on [Special:OAuthConsumerRegistration/propose](https://meta.wikimedia.org/wiki/Special:OAuthConsumerRegistration/propose).
- Continue to require both grants, but make it impossible to request a consumer with “rollback” and without “edit” grant.
- Make the “rollback” grant imply th
[I hit “submit” too early, hang on…]