Last modified: 2011-03-13 18:06:12 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T24058, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 22058 - Blocked users can edit monobook.css etc.
Blocked users can edit monobook.css etc.
Status: RESOLVED WONTFIX
Product: MediaWiki
Classification: Unclassified
User blocking (Other open bugs)
1.16.x
All All
: Lowest enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-01-08 16:22 UTC by DaSch
Modified: 2011-03-13 18:06 UTC (History)
7 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description DaSch 2010-01-08 16:22:08 UTC
I think it should be possible to blocked users to edit their monobook.css and so on.
This pages are like Preferences and also useful for reading. So even if the user has no right to edit pages in the wiki I think he should be able to edit his preferences and the way he want's to see the wiki.
Comment 1 Platonides 2010-01-08 16:52:12 UTC
Those pages are public. They could use them as platform for their arguments even if they are blocked.
This is a WONTFIX for me.
Comment 2 DaSch 2010-01-08 16:57:59 UTC
well if they do so the pages could be closed specificly or maybe this pages schould not be public. But for me there is not reason why a blocked user has no possibility for changing his displaying-options
Comment 3 Mike.lifeguard 2010-01-08 17:00:54 UTC
(In reply to comment #1)
> Those pages are public. They could use them as platform for their arguments
> even if they are blocked.
> This is a WONTFIX for me.
> 

NO, the talk page serves that purpose!
Comment 4 Happy-melon 2010-01-12 23:54:53 UTC
(In reply to comment #3)
> (In reply to comment #1)
> > Those pages are public. They could use them as platform for their arguments
> > even if they are blocked.
> > This is a WONTFIX for me.
> > 
> 
> NO, the talk page serves that purpose!
> 

"NO" to what??  The talk page is one platform for blocked editors to communicate on-wiki.  If enabled, these pages would be another.  Are you saying that that's not true, that that's a bad idea, or something else?  Please clarify.
Comment 5 Mike.lifeguard 2010-01-13 00:48:26 UTC
I'm saying Platonides' rationale is incorrect. (It also happens to be a bad idea, but being wrong is sufficient for now)
Comment 6 Platonides 2010-01-13 18:32:23 UTC
Precisely, we shouldn't open those additional pages.
Protecting the talk page is one action. Protecting any .css/.js subpage he may want 
to create is not.
There would also be issues if his .js were included by third users. But using javascript
from an untrusted user is always unsafe.
Comment 7 Happy-melon 2010-01-13 18:37:02 UTC
Indeed; I kind of took it for granted that Platonides was saying that it should be WONTFIXed *because they could become* unwanted platforms.  

Are you saying that we *should* open up these pages, Mike, or are we actually all singing from the same songsheet here?
Comment 8 Chad H. 2010-01-13 18:39:01 UTC
If an editor is blocked, they cannot edit. Period. We make an exception to user talk pages so they can retain a method to appeal a block.

I don't really agree with the "could be another soapbox" argument, but I certainly agree with the suggestion to WONTFIX this. Marking as such.
Comment 9 DaSch 2010-01-13 18:44:51 UTC
Well that's a little bit to fast for me.

The thing is, that the .css and .js are some kind of settings. Is there any argument why a user should not be able to change his settings while he is blocked? When the personal .css and .js are blocked so the settings should be blocked too.
Comment 10 Happy-melon 2010-01-13 18:49:09 UTC
Yes: the ability to do anything on a wiki is a privilege, not a right.  If a user doesn't want to lose the ability to edit their settings, that user should not get themselves blocked.  If there is something they desperately need or if the page is broken, they can ask an admin to change the page for them.  Or use browser styles. 
Comment 11 Aryeh Gregor (not reading bugmail, please e-mail directly) 2010-01-13 18:51:01 UTC
I agree with the logic of comment #9, but these are public settings that can contain arbitrary text, so they're somewhat different.  Also, if we whitelist User:Foo/*.{css,js}, then they could just create unlimited pages and admins would be unable to stop them.  Currently admins can shut up abusive blocked users by protecting only their user talk page, and this would make that more difficult or impossible.

Overall, the idea is nice, but I don't think this feature is worth the complications it would cause.  If a blocked user really wants custom CSS/JS, they can use their browser's support of that, if applicable.  Or maybe create a new account to view with and not use it to edit, if possible.  Or ask an admin, as Happy-melon says.  I don't think we need to go to great lengths to make this possible.  So I agree with WONTFIX.
Comment 12 Andrew Garrett 2010-01-13 18:52:12 UTC
I don't have a problem with users changing their settings while blocked, but I don't think that it's a good idea to be making exceptions to the "no editing pages when you're blocked" rule because a particular edit could be considered editing settings.
Comment 13 DaSch 2010-01-13 18:59:18 UTC
I think that is something that should be kept in mind. For example the creation of a new account is not always a solution. For example with a global account you have to login to the wiki your are blocked with another account just to have the abillity to have you're styles. And the go to antoher wiki and have to login with your other account. That's not really a solution.

By the way some users are getting blocked by purpouse because they to not want to edit, but maybe the need there styles for reading and it would be very complicated to always ask an admin to change their styles.

It should be considerd that editing and reading are two different things and personal styles are also mostly for reading and not for editing.
Comment 14 Chad H. 2010-01-13 19:10:59 UTC
(In reply to comment #13)
> By the way some users are getting blocked by purpouse because they to not want
> to edit but maybe the need there styles for reading and it would be very
> complicated to always ask an admin to change their styles.

That's just stupid.
Comment 15 Platonides 2010-01-13 22:18:15 UTC
Replace .css subpages with [[Stylish]] [2] and .js with [[Greasemonkey]] [2].

You don't need to create accounts, remember passwords or copy the styles on each wiki.

1- https://addons.mozilla.org/en-US/firefox/addon/748
2- https://addons.mozilla.org/en-US/firefox/addon/2108
Comment 16 DaSch 2010-01-13 22:21:36 UTC
so the solution for this bug is to force everybody to use firefox and install this extensions?
Sorry, but: "That's just stupid."
Comment 17 Mike.lifeguard 2010-01-13 22:24:59 UTC
(In reply to comment #7)
> Indeed; I kind of took it for granted that Platonides was saying that it should
> be WONTFIXed *because they could become* unwanted platforms.  

Sorry, I was reading things as being opposite. Platonides is correct & the I'd consider changing MediaWiki as requested to be introducing a bug.
Comment 18 Alex Z. 2010-01-13 22:46:22 UTC
(In reply to comment #16)
> so the solution for this bug is to force everybody to use firefox and install
> this extensions?
> Sorry, but: "That's just stupid."
> 

No, not everyone, just the tiny minority of users who are blocked and want to be able to change CSS/JS but aren't willing to contact an administrator. 

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links