[Mediawiki-l] article::doEdit with user rights

Gunter News2006 at freenet.de
Thu Mar 22 16:57:34 UTC 2007


Hello,

I am writing an extension, that edits articles.

Surprisingly, the funciton article::doEdit does not check user rights.

I set
$wgGroupPermissions['*']['edit'] = false;
so only logged in users can edit.

Using my extension, even anons can now edit.

So I tried to prevent this with
                    $x_title = title::newFromText('Main page');
                    $allowed = $x_title->userCan('edit');
but this always returns true. $x_title->userCan('move'); works fine.

For curiosity I set:
$wgReadOnly = "Update in progress. Wiki is set to read only.";
so the whole wiki is locked.

But even then the extension can edit articles and userCan returns true.

MW 1.10, trunk about a week old.

Any hints, or is it a bug?

GunterS





More information about the MediaWiki-l mailing list