A little more clarification... I wish to:
1. remove all default rights from the group "users" (essentially saying, "being registered here doesn't grant you anything new")
2. create a group called "area1user" (which only grants "read" permissions to the custom namespace "area1")
3. create a group called "area1editor" (which grants "edit" permissions to the custom namespace "area1")
4. do steps 2 and 3 for the "area2" namespace and other namespaces
...etc...
Basically I wish for the "Main" namespace (and all the others) to appear to registered users who are not in an appropriate group to appear as if they are not registered at all... and allow Bureaucrats to manually add people to the appropriate groups.
The next question would be.. is it possible to "auto-promote" users to certain groups based on conditional PHP code in Localsettings which has access to variables from the user's session header.
-Rich
-----Original Message----- From: Evans, Richard K. (GRC-H000) Sent: Thursday, November 02, 2017 8:55 AM To: mediawiki-l@lists.wikimedia.org Subject: move basic user rights to custom groups for EMW
Hello,
How can I remove a basic user right available to all by default (say, "editmyusercss") , and add it as a right only available to a custom group that only Bureaucrats can assign users to? Thank you.
Ultimately, what I'm trying to do is for a private enterprise mediawiki (EMW). I want to be able to allow all externally authenticated users visting my site to be autoregistered (autocreateaccount), but I want to authorize them to view content based on other session data available to me. My goal is to set my site up to deny all of the basic default privledges that come with merely being a registered user on the site and then to auto add users to specific custom groups based on additional identification data I get from the browser session header. I think I can do all this once I know how to create custom groups and remove default basic rights to the custom groups from the localsettings.php file. Then I can manually assign users to custom groups and work on being able to autoassign users to groups later.
Thank you! -Rich