Michael Kingery (HL7) wrote: First thought: You are using an insecure mediawiki version released more than two years old. There have been four major versions since. Second one: The protect right allows you to protect a page, unprotect a page and edit protected pages.

Are there any notes that indicate that this issue has been corrected by a more recent release? Shouldn't the protect prevent you from editing a page that has been protected? It says that the page can only be edited by a Sysop, but it's allowing anyone to edit it. Mike Kingery Director of Technical Services Health Level Seven International +1 (919) 636-4032 -----Original Message----- From: mediawiki-l-bounces(a)lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Platonides Sent: Friday, July 30, 2010 6:49 PM To: mediawiki-l(a)lists.wikimedia.org Subject: Re: [Mediawiki-l] Protect tab not working the way I expected Michael Kingery (HL7) wrote: be unprotect First thought: You are using an insecure mediawiki version released more than two years old. There have been four major versions since. Second one: The protect right allows you to protect a page, unprotect a page and edit protected pages. _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

You may be looking for something like: http://www.mediawiki.org/wiki/Manual:$wgRestrictionLevels

I do want to give all logged-in users the right to protect a page. My understanding is that this setting does not impact who can edit a protected page. It asks you for that when you protect the page, and I tell it that I only want sysops to be able to edit the page, but it's allowing anyone to edit the page if they're logged in despite the fact that it shows a message on the edit screen saying that only sysops can edit because it's protected. And when I edit a protected page as a sysop or a logged-in user, it never forces me to unprotect the page. Just to test, I commented out the line you listed below and this caused the Protect tab to disappear for logged-in users that are not sysops, which is not what I'm looking for. I've found some listings on the web about the editprotect setting which I have included below, but this doesn't seem to affect anything. $wgGroupPermissions['*']['editprotected'] = false; $wgGroupPermissions['user']['editprotected'] = false; $wgGroupPermissions['sysop']['editprotected'] = true; Mike Kingery Director of Technical Services Health Level Seven International +1 (919) 636-4032 -----Original Message----- From: mediawiki-l-bounces(a)lists.wikimedia.org [mailto:mediawiki-l-bounces@lists.wikimedia.org] On Behalf Of Benjamin Lees Sent: Sunday, August 01, 2010 8:34 AM To: MediaWiki announcements and site admin list Subject: Re: [Mediawiki-l] Protect tab not working the way I expected On Sun, Aug 1, 2010 at 12:16 AM, Michael Kingery (HL7) <mkingery(a)hl7.org> wrote: correctly. me You gave all logged-in users the right to edit protected page with this line: $wgGroupPermissions['user']['protect'] = true; Remove that line if that's not what you want. _______________________________________________ MediaWiki-l mailing list MediaWiki-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Michael Kingery (HL7) wrote: Yes, but sysop is equivalent in this context to "someone able to protect and unprotect pages". There's no option like the one you want. And even if you removed the "people with protect can edit any protected page", they would still be able to unprotect it. You would need an extension to give them the ability to protect without the other capabilities that are currently associated with protect.