Hi all,
Why are locked users can log in via the API? Would have expected that the users get back the status blocked. It says so in any case in the documentation. I have a standard SVN installation without extensions or other modifications. Can anyone confirm this? Below the query and the result comes from unit testing. It looks like get, but in reality it is a post request.
http://unittest.xarax.eu/w/api.php?format=xml&action=login&lgname=un... g02&lgpassword=xxxxx&lgtoken=05b7b7fc4d5d18e389520d5e3ba7f0c2 <?xml version="1.0"?><api xmlns="http://www.mediawiki.org/xml/api/"><login result="Success" lguserid="3" lgusername="Unittesting02" lgtoken="ef8fc0d6e4f463e3b2c8d1716d306f5f" cookieprefix="mw_ut_19a" sessionid="2bce1ed6a491fe957894bab610b77ae4" /></api>
The user is really blocked, like the log says.
12:01, 3. Jun. 2011 Unittesting02 (Diskussion | Beiträge) unbegrenzt (Freigeben | Sperre ändern) Sysadmin (Diskussion | Beiträge | Sperren) Erstellung von Benutzerkonten gesperrt, darf eigene Diskussionsseite nicht bearbeiten (Ungebührliches Verhalten)
I forgot to configure something or is this by design and the documentation is wrong?
Best regards - xarax -
On Fri, Jun 3, 2011 at 2:38 PM, - xarax- ms@xarax.eu wrote:
Hi all,
Why are locked users can log in via the API?
Blocked users can log in just fine, both via the UI and the API. However, they can't edit or move pages or change anything in any other way, except if $wgBlockAllowsUTEdit is set to true, in which case blocked users can edit their own user talk page (usually to appeal the block and present arguments and evidence in their favor).
Roan Kattouw (Catrope)
On Fri, Jun 3, 2011 at 4:12 PM, Roan Kattouw roan.kattouw@gmail.com wrote:
Blocked users can log in just fine, both via the UI and the API.
...except if $wgBlockDisablesLogin is true, in that case blocked users can't even log in. This is useful on private wikis where anonymous users can't read pages.
Roan Kattouw (Catrope)
Thank you Roan for your clarification.
-----Ursprüngliche Nachricht----- Von: mediawiki-api-bounces@lists.wikimedia.org [mailto:mediawiki-api-bounces@lists.wikimedia.org] Im Auftrag von Roan Kattouw Gesendet: Freitag, 3. Juni 2011 16:14 An: MediaWiki API announcements & discussion Betreff: Re: [Mediawiki-api] Blocked user can logon via api
On Fri, Jun 3, 2011 at 4:12 PM, Roan Kattouw roan.kattouw@gmail.com wrote:
Blocked users can log in just fine, both via the UI and the API.
...except if $wgBlockDisablesLogin is true, in that case blocked users can't even log in. This is useful on private wikis where anonymous users can't read pages.
Roan Kattouw (Catrope)
_______________________________________________ Mediawiki-api mailing list Mediawiki-api@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-api
mediawiki-api@lists.wikimedia.org