Last modified: 2012-06-05 04:25:06 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T35390, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 33390 - Examine page is visible for hidden log entries
Examine page is visible for hidden log entries
Status: RESOLVED FIXED
Product: MediaWiki extensions
Classification: Unclassified
AbuseFilter (Other open bugs)
unspecified
All All
: Unprioritized normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2011-12-27 21:27 UTC by Nikola Kovacs
Modified: 2012-06-05 04:25 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments
Prevent access to hidden log entries' examine page, and prevent access to examine for log entries for user who do not have abusefilter-log-detail (615 bytes, patch)
2011-12-27 21:39 UTC, Nikola Kovacs
Details
Add error message (398 bytes, patch)
2011-12-27 23:49 UTC, Nikola Kovacs
Details

Description Nikola Kovacs 2011-12-27 21:27:14 UTC
A hidden entry's examine page can still be accessed using the url (e.g. Special:AbuseFilter/examine/log/2 ). Since the examine page contains much of the same information as the details page, it should be restricted as well.
Comment 1 Nikola Kovacs 2011-12-27 21:39:18 UTC
Created attachment 9767 [details]
Prevent access to hidden log entries' examine page, and prevent access to examine for log entries for user who do not have abusefilter-log-detail

This patch fixes this bug and also fixes bug 24186 properly, by preventing access to the examine page for all log entries if the user doesn't have the abusefilter-log-detail right
Comment 2 Mark A. Hershberger 2011-12-27 23:39:04 UTC
r107451
Comment 3 Nikola Kovacs 2011-12-27 23:49:33 UTC
Created attachment 9769 [details]
Add error message

The error message "abusefilter-log-cannot-see-details" should also be shown when trying to view details.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links