From 180e0403774d535133c3b32d51ffa0fb4122df7b Mon Sep 17 00:00:00 2001
From: DannyS712 <dannys712.enwiki@gmail.com>
Date: Fri, 1 Jan 2021 12:40:41 +0200
Subject: [PATCH] SECURITY: ContentModelChange: Check that user can create
 pages
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Taavi Väänänen <hi@tassu.me>
Change-Id: I2e3b79f36fa7c0a3ec4130de0ae9c68104cb3fdd
---
 includes/content/ContentModelChange.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/includes/content/ContentModelChange.php b/includes/content/ContentModelChange.php
index 16a2ee520a..258bdf4953 100644
--- a/includes/content/ContentModelChange.php
+++ b/includes/content/ContentModelChange.php
@@ -113,6 +113,9 @@ class ContentModelChange {
 		$titleWithNewContentModel->setContentModel( $this->newModel );
 
 		$status = PermissionStatus::newEmpty();
+		if ( !$current->exists() ) {
+			$authorizer( 'create', $current, $status );
+		}
 		$authorizer( 'editcontentmodel', $current, $status );
 		$authorizer( 'edit', $current, $status );
 		$authorizer( 'editcontentmodel', $titleWithNewContentModel, $status );
-- 
2.27.0