https://bugzilla.wikimedia.org/show_bug.cgi?id=29135

--- Comment #12 from Happy-melon <happy.melon.w...@gmail.com> 2011-06-09 
10:41:15 UTC ---
In ordinary vanilla MediaWiki, a non-sysop User X cannot be *prevented* from
triggering password reset for User Y, because User X can simply log out and
become Nobody.  Therefore there is no point in restricting access to
Special:PasswordReset from logged-in users.  

What you are describing is a special situation generated by the use of the
OpenID extension.  Therefore any changes that you want to make to the behaviour
of Special:PasswordReset should be achieved by hooks in the special page and
hook functions in the extension.  If extra hooks are needed, by all means ask
for them to be added.  But much of this behaviour doesn't make any sense in a
standard MediaWiki environment.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to