[ewiki] create action, action-links flaw

I think there's a problem with the current implementation of the create
pseudo action.  If a call to ewiki_auth() originates as ewiki_auth($id,
&$data, $action="setflags"), the current code would pass this to the perm
plugin as $pf_perm($id, $data, 'create', $ring) thus allowing a setflags
action to be performed on a page that the user only has create rights to.

Instead I suggest that we not change the action at all inside of
ewiki_auth() but rather expect auth plugins to know about and check this
flag in $ewiki_config.

Andy

Other related posts: