MediaWiki API不正确的用户权限

Question

我正在与MediaWiki 1.27的WikiEditor扩展进行斗争。当用户尝试使用增强编辑器工具栏中的花哨图像上传按钮时，我会收到消息“您必须登录才能上传文件。”

到目前为止，我已将其范围缩小到API返回的用户权限不完整。我已经使用以下两个API调用进行了测试：

一个WikiEditor使用：action=query&meta=userinfo&uiprop=rights 返回：

{
    "batchcomplete": "",
    "query": {
        "userinfo": {
            "id": 1006,
            "name": "john_smith",
            "rights": [
                "read",
                "createpage",
                "createtalk",
                "writeapi",
                "editmyusercss",
                "editmyuserjs",
                "viewmywatchlist",
                "editmywatchlist",
                "viewmyprivateinfo",
                "editmyprivateinfo",
                "editmyoptions",
                "autocreateaccount"
            ]
        }
    }
}

但是，此API调用：action=query&list=users&ususers=john_smith&usprop=rights返回：

{
    "batchcomplete": "",
    "query": {
        "users": [
            {
                "userid": 1006,
                "name": "john_smith",
                "rights": [
                    "block",
                    "createaccount",
                    "delete",
                    "bigdelete",
                    "deletedhistory",
                    "deletedtext",
                    "undelete",
                    "editinterface",
                    "editusercss",
                    "edituserjs",
                    "editcontentmodel",
                    "import",
                    "importupload",
                    "move",
                    "move-subpages",
                    "move-rootuserpages",
                    "move-categorypages",
                    "patrol",
                    "autopatrol",
                    "protect",
                    "editprotected",
                    "rollback",
                    "upload",
                    "reupload",
                    "reupload-shared",
                    "unwatchedpages",
                    "autoconfirmed",
                    "editsemiprotected",
                    "ipblock-exempt",
                    "blockemail",
                    "markbotedits",
                    "apihighlimits",
                    "browsearchive",
                    "noratelimit",
                    "movefile",
                    "unblockself",
                    "suppressredirect",
                    "mergehistory",
                    "managechangetags",
                    "deleterevision",
                    "read",
                    "createpage",
                    "createtalk",
                    "writeapi",
                    "editmyusercss",
                    "editmyuserjs",
                    "viewmywatchlist",
                    "editmywatchlist",
                    "viewmyprivateinfo",
                    "editmyprivateinfo",
                    "editmyoptions",
                    "autocreateaccount",
                    "edit",
                    "minoredit",
                    "purge",
                    "sendemail",
                    "applychangetags",
                    "changetags"
                ]
            }
        ]
    }
}

我完全难以理解，并且不知道为什么这两个非常相似的API调用会返回一组不同的权限。因此，用户无法通过增强编辑器按钮上传图像。