Last modified: 2011-03-13 18:06:26 UTC
Split "protect" right to "protect" and "editprotected", so user can be granted permission to edit protected page but not to change the level of protection of any page.
Doable with existing $wgRestrictionLevels setup; no need to break the semantics of the current right assignment.