[05:00:23] "I wouldn't think "edit" could be..." <- I don't understand why you'd want this or how it would work. "edit" is or should be useless if you don't have "read". [05:00:59] the idea was to have a bot that only posted notices to a page on a private wiki using appendtext [05:02:22] You can't use the API without "read" [05:03:15] you're gonna hate this question, but is that documented somewhere [05:03:47] https://en.wikipedia.org/w/api.php?modules=edit little right infobox [05:04:08] "This module requires read rights." [05:04:30] Just about every module will have that except action=login and a few other edge cases [05:32:55] enterprisey: I'd suggest using some sort of feed extension such as https://www.mediawiki.org/wiki/Extension:RSS and using that to pull the notices from your bot instead of having the bot push them [05:33:40] yeah I'm not really seriously considering putting the bot on the private wiki, it'll probably be too risky [05:33:56] or if that's not feasible, you could have a second (public) wiki that your bot can write notices to, that are transcluded into the private one via interwiki transclusion ($wgEnableScaryTransclusion) [05:34:47] well, not necessarily public, but readable to the bot as well as the webserver of your main private wiki [05:35:11] both of those methods have significant downsides in terms of added maintenance [05:35:28] I don't really think it's a big security risk to have a bot run on a private wiki [05:35:44] depends on your threat model, but probably not [05:45:55] I have a sneaking suspicion I know which private wiki this is :^) [06:18:44] Izno: correct in one :)