Author: matthew.britton
Description:
Using action=paraminfo on the userrights module:
http://en.wikipedia.org/w/api.php?action=paraminfo&modules=userrights
gives the error "The user parameter must be set", as though action=userrights had been called directly. The query works if a 'user' parameter is given -- any user, so long as they exist:
However, the output of paraminfo is not dependent on this parameter, so it should not be a requirement. No other modules seem to exhibit this behavior; for example
http://en.wikipedia.org/w/api.php?action=paraminfo&modules=edit
works correctly, even though the edit module has required parameters.
Version: 1.17.x
Severity: normal
URL: http://en.wikipedia.org/w/api.php?action=paraminfo&modules=userrights