That's a fair point, but keep in mind normal admin is not sufficient. For local users (the account in question wasn't local) you need to be an "interface admin", of which there are only 15 on english wikipedia.
replyThe account in question had "staff" rights which gave him basically all rights on all wikis.
> For local users (the account in question wasn't local) you need to be an "interface admin", of which there are only 15 on english wikipedia.
replyIt used to be all "admin" accounts, of which there were many more. Restricting it to "interface admin" only is a fairly recent change.
> Restricting it to "interface admin" only is a fairly recent change.
replyIts been 8 years!
> Well, admins (or anybody other than the developers / deployment pipeline) having permissions to alter the JS sounds like a significant vulnerability.
replyIt's a common feature of CMS'es and "tag management systems." Its presence is a massive PITA to developers even _besides_ the security, but PMs _love them_, in my experience.