From fc644aa4dbf3c1e58c467b225eb648861d76e92f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bartosz=20Dziewo=C5=84ski?= Date: Sat, 2 Sep 2023 00:12:30 +0200 Subject: [PATCH] Article: Check permissions before showing link to view deleted revision Bug: T264765 Change-Id: Ie5c1bc8d5a4b3eeee8da8c8ae336f5baaebc3238 --- includes/page/Article.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/page/Article.php b/includes/page/Article.php index 12180e3d70d..161da06e1a7 100644 --- a/includes/page/Article.php +++ b/includes/page/Article.php @@ -1547,7 +1547,7 @@ class Article implements Page { if ( $revRecord && $revRecord->userCan( RevisionRecord::DELETED_TEXT, $context->getAuthority() - ) ) { + ) && $context->getAuthority()->isAllowedAny( 'deletedtext', 'undelete' ) ) { $text = $context->msg( 'missing-revision-permission', $oldid, $revRecord->getTimestamp(), -- 2.28.0.windows.1