Here's the basic information about my install:
MediaWiki 1.12.0
PHP 5
Database MySQL
What I'm looking to do is to allow any user with edit permissions to be able to Protect a page so that only Sysops are able to edit / unprotect it. To do this I turned on the Protect tab with the following code in the LocalSettings.php file:
# Only allow users and sysops to protect a page
$wgGroupPermissions['*']['protect'] = false;
$wgGroupPermissions['user']['protect'] = true;
$wgGroupPermissions['sysop']['protect'] = true;
The Protect tab does show up now, and you can protect a page, but when ANYONE with edit privileges goes to edit they are able to do so regardless of unprotecting the page or being a sysop. When editing, it does show the following message, but lets you edit and save anyways:
WARNING: This page has been locked so that only users with sysop privileges can edit it.
Any thoughts?
On 07/30/2010 09:04 PM, Michael Kingery (HL7) wrote:
WARNING: This page has been locked so that only users with sysop privileges can edit it.
I'm not sure if I understand you correctly, but if it's simply a wrong interface message, you can fix it by editing this page on your wiki:
MediaWiki:Protectedpagewarning
No, I don't think it's not a wrong message, it's not working correctly. It is correctly telling me that the page is protected; the problem is that it's still letting me edit the page despite that. It should stop me from editing it because I'm not logged in as a sysop.
Mike Kingery Director of Technical Services Health Level Seven International +1 (919) 636-4032
-----Original Message----- From: mediawiki-l-bounces@lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of church.of.emacs.ml Sent: Friday, July 30, 2010 5:53 PM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Protect tab not working the way I expected
On 07/30/2010 09:04 PM, Michael Kingery (HL7) wrote:
WARNING: This page has been locked so that only users with sysop privileges can edit it.
I'm not sure if I understand you correctly, but if it's simply a wrong interface message, you can fix it by editing this page on your wiki:
MediaWiki:Protectedpagewarning
On Sun, Aug 1, 2010 at 12:16 AM, Michael Kingery (HL7) mkingery@hl7.org wrote:
No, I don't think it's not a wrong message, it's not working correctly. It is correctly telling me that the page is protected; the problem is that it's still letting me edit the page despite that. It should stop me from editing it because I'm not logged in as a sysop.
You gave all logged-in users the right to edit protected page with this line: $wgGroupPermissions['user']['protect'] = true; Remove that line if that's not what you want.
You may be looking for something like: http://www.mediawiki.org/wiki/Manual:$wgRestrictionLevels
I'm not sure I understand your suggestion. The list of keys on the protection page are correct, they include the sysops which is what I want to set the page protection level to. I don't need to add anything to that list.
The problem is that when I set the page to be protected and editable by only sysops that anyone who is logged-in can still edit the page without unprotecting it.
Mike Kingery Director of Technical Services Health Level Seven International +1 (919) 636-4032
-----Original Message----- From: mediawiki-l-bounces@lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of K. Peachey Sent: Sunday, August 01, 2010 8:38 AM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Protect tab not working the way I expected
You may be looking for something like: http://www.mediawiki.org/wiki/Manual:$wgRestrictionLevels
_______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
I do want to give all logged-in users the right to protect a page. My understanding is that this setting does not impact who can edit a protected page. It asks you for that when you protect the page, and I tell it that I only want sysops to be able to edit the page, but it's allowing anyone to edit the page if they're logged in despite the fact that it shows a message on the edit screen saying that only sysops can edit because it's protected. And when I edit a protected page as a sysop or a logged-in user, it never forces me to unprotect the page.
Just to test, I commented out the line you listed below and this caused the Protect tab to disappear for logged-in users that are not sysops, which is not what I'm looking for.
I've found some listings on the web about the editprotect setting which I have included below, but this doesn't seem to affect anything.
$wgGroupPermissions['*']['editprotected'] = false; $wgGroupPermissions['user']['editprotected'] = false; $wgGroupPermissions['sysop']['editprotected'] = true;
Mike Kingery Director of Technical Services Health Level Seven International +1 (919) 636-4032
-----Original Message----- From: mediawiki-l-bounces@lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Benjamin Lees Sent: Sunday, August 01, 2010 8:34 AM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Protect tab not working the way I expected
On Sun, Aug 1, 2010 at 12:16 AM, Michael Kingery (HL7) mkingery@hl7.org wrote:
No, I don't think it's not a wrong message, it's not working
correctly.
It is correctly telling me that the page is protected; the problem is that it's still letting me edit the page despite that. It should stop
me
from editing it because I'm not logged in as a sysop.
You gave all logged-in users the right to edit protected page with this line: $wgGroupPermissions['user']['protect'] = true; Remove that line if that's not what you want.
_______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Michael Kingery (HL7) wrote:
I do want to give all logged-in users the right to protect a page. My understanding is that this setting does not impact who can edit a protected page. It asks you for that when you protect the page, and I tell it that I only want sysops to be able to edit the page, but it's allowing anyone to edit the page if they're logged in despite the fact that it shows a message on the edit screen saying that only sysops can edit because it's protected. And when I edit a protected page as a sysop or a logged-in user, it never forces me to unprotect the page.
Just to test, I commented out the line you listed below and this caused the Protect tab to disappear for logged-in users that are not sysops, which is not what I'm looking for.
I've found some listings on the web about the editprotect setting which I have included below, but this doesn't seem to affect anything.
$wgGroupPermissions['*']['editprotected'] = false; $wgGroupPermissions['user']['editprotected'] = false; $wgGroupPermissions['sysop']['editprotected'] = true;
Mike Kingery Director of Technical Services Health Level Seven International +1 (919) 636-4032
Yes, but sysop is equivalent in this context to "someone able to protect and unprotect pages". There's no option like the one you want. And even if you removed the "people with protect can edit any protected page", they would still be able to unprotect it. You would need an extension to give them the ability to protect without the other capabilities that are currently associated with protect.
Michael Kingery (HL7) wrote:
Here's the basic information about my install:
MediaWiki 1.12.0 PHP 5 Database MySQL
What I'm looking to do is to allow any user with edit permissions to be able to Protect a page so that only Sysops are able to edit / unprotect it. To do this I turned on the Protect tab with the following code in the LocalSettings.php file:
# Only allow users and sysops to protect a page $wgGroupPermissions['*']['protect'] = false; $wgGroupPermissions['user']['protect'] = true; $wgGroupPermissions['sysop']['protect'] = true;
The Protect tab does show up now, and you can protect a page, but when ANYONE with edit privileges goes to edit they are able to do so regardless of unprotecting the page or being a sysop. When editing, it does show the following message, but lets you edit and save anyways:
WARNING: This page has been locked so that only users with sysop privileges can edit it.
Any thoughts?
First thought: You are using an insecure mediawiki version released more than two years old. There have been four major versions since.
Second one: The protect right allows you to protect a page, unprotect a page and edit protected pages.
Are there any notes that indicate that this issue has been corrected by a more recent release?
Shouldn't the protect prevent you from editing a page that has been protected? It says that the page can only be edited by a Sysop, but it's allowing anyone to edit it.
Mike Kingery Director of Technical Services Health Level Seven International +1 (919) 636-4032
-----Original Message----- From: mediawiki-l-bounces@lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Platonides Sent: Friday, July 30, 2010 6:49 PM To: mediawiki-l@lists.wikimedia.org Subject: Re: [Mediawiki-l] Protect tab not working the way I expected
Michael Kingery (HL7) wrote:
Here's the basic information about my install:
MediaWiki 1.12.0 PHP 5 Database MySQL
What I'm looking to do is to allow any user with edit permissions to
be
able to Protect a page so that only Sysops are able to edit /
unprotect
it. To do this I turned on the Protect tab with the following code in the LocalSettings.php file:
# Only allow users and sysops to protect a page $wgGroupPermissions['*']['protect'] = false; $wgGroupPermissions['user']['protect'] = true; $wgGroupPermissions['sysop']['protect'] = true;
The Protect tab does show up now, and you can protect a page, but when ANYONE with edit privileges goes to edit they are able to do so regardless of unprotecting the page or being a sysop. When editing, it does show the following message, but lets you edit and save anyways:
WARNING: This page has been locked so that only users with sysop privileges can edit it.
Any thoughts?
First thought: You are using an insecure mediawiki version released more than two years old. There have been four major versions since.
Second one: The protect right allows you to protect a page, unprotect a page and edit protected pages.
_______________________________________________ MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Michael Kingery (HL7) wrote:
Are there any notes that indicate that this issue has been corrected by a more recent release?
Shouldn't the protect prevent you from editing a page that has been protected? It says that the page can only be edited by a Sysop, but it's allowing anyone to edit it.
It can only be edited by someone with protect rights (ie. someone which could unprotect it and edit anyway). By default, that's just sysops.
mediawiki-l@lists.wikimedia.org