Last modified: 2012-04-16 09:15:56 UTC
It seems a page protected from creation does not prevent file upload (see the linked log). I am not completely sure about the cause (it seems there are multiple issues around that), but by digging in the code, I found r65898, which has, IMHO reversed the logic of protection checking.
We'd noticed this a little before *** This bug has been marked as a duplicate of bug 28166 ***