Consumer Rights Wiki talk:Bugs: Difference between revisions
→Edit title names: Reply |
MEN KISSING (talk | contribs) →New users have the editcontentmodel user right: new section |
||
| Line 139: | Line 139: | ||
::What you need to do is click on the 'Tools' button on the right above the article if you have it, and from there even if you don't have it on the right a 'move' button should appear. Click that and move the page. [[User:AnotherConsumerRightsPerson|'''''AnotherConsumerRightsPerson''''']] ([[User talk:AnotherConsumerRightsPerson|talk]]) 17:28, 5 March 2026 (UTC) | ::What you need to do is click on the 'Tools' button on the right above the article if you have it, and from there even if you don't have it on the right a 'move' button should appear. Click that and move the page. [[User:AnotherConsumerRightsPerson|'''''AnotherConsumerRightsPerson''''']] ([[User talk:AnotherConsumerRightsPerson|talk]]) 17:28, 5 March 2026 (UTC) | ||
:::Thank you! [[User:A Clippy|A Clippy]] ([[User talk:A Clippy|talk]]) 06:23, 8 March 2026 (UTC) | :::Thank you! [[User:A Clippy|A Clippy]] ([[User talk:A Clippy|talk]]) 06:23, 8 March 2026 (UTC) | ||
== New users have the editcontentmodel user right == | |||
The editcontentmodel user right (see [https://www.mediawiki.org/wiki/Help:ChangeContentModel]) is currently bestowed (I believe mistakenly) to new users, which you can check via [[Special:ListGroupRights]]. This allows any logged-in user to change the content model of any page on the wiki between CSS, Javascript, JSON, plaintext, sanitized CSS, and wikitext, using [[Special:ChangeContentModel]]. On the English Wikipedia, this is a user right only granted to administrators and other such trusted user groups, I expect because it can massively reformat an entire page, and because I'm not sure if it checks for permission to edit the target page. | |||
I'm not a security expert, but maybe there's a chance there's a security problem as well involving placing malicious code in any namespace? Though, I don't think there would be a way to run the code. I'm more worried about potential vandalism. | |||
There's only been three uses of this tool (one use being a test by myself) on this wiki, so I'm sure you guys aren't going to be missing out on much by restricting usage of this tool to only trusted users. [[User:MEN KISSING|MEN KISSING]] ([[User talk:MEN KISSING|talk]]) 09:27, 13 March 2026 (UTC) | |||