Summary
ReleaseDraft pages are currently publicly viewable and show up in RecentChanges. Only editing is restricted (via upload-to-delivery-kid permission). Musicians preparing releases won't want their draft metadata (album titles, track listings, artist names) visible before release.
Proposed Solution
Use the Lockdown extension to restrict read access to the ReleaseDraft namespace (3006/3007) so only users with upload-to-delivery-kid permission can view draft pages.
Also consider:
- Excluding ReleaseDraft from
$wgRCExcludedNamespaces so drafts don't appear in RecentChanges for unprivileged users
- Whether completed drafts (status=complete) should become publicly readable
Context
The draft pages only contain metadata (album title, artist, track names, Vorbis comment fields, blockheight). The actual audio files live on delivery-kid's storage, not on the wiki. But even metadata can reveal upcoming releases.
Summary
ReleaseDraft pages are currently publicly viewable and show up in RecentChanges. Only editing is restricted (via
upload-to-delivery-kidpermission). Musicians preparing releases won't want their draft metadata (album titles, track listings, artist names) visible before release.Proposed Solution
Use the Lockdown extension to restrict read access to the ReleaseDraft namespace (3006/3007) so only users with
upload-to-delivery-kidpermission can view draft pages.Also consider:
$wgRCExcludedNamespacesso drafts don't appear in RecentChanges for unprivileged usersContext
The draft pages only contain metadata (album title, artist, track names, Vorbis comment fields, blockheight). The actual audio files live on delivery-kid's storage, not on the wiki. But even metadata can reveal upcoming releases.