Additional release notes for r85005, which I meant to commit as two separate revision...

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 08850ef..7fe18b9 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -208,6 +208,9 @@ PHP if you have not done so prior to upgrading MediaWiki.
 * (bug 15641) blocked administrators are now prevented from deleting or protecting
   their own talk page; and all blocked users are more comprehensively prevented
   from performing other actions
+* (bug 15641) Fixed positioning of permissions checks in Special:Import which
+  allowed users without the 'import' permission to import pages if they directly
+  submitted the form.
 
 === API changes in 1.18 ===
 * (bug 26339) Throw warning when truncating an overlarge API result