Is there some config variable to restrict the granting of "sysop" priv to only the sysop account, and not other accounts in the sysop group? If not, where in the code should I rummage to find the right place to add a mod?
The Centerfielder wrote:
Is there some config variable to restrict the granting of "sysop" priv to only the sysop account, and not other accounts in the sysop group? If not, where in the code should I rummage to find the right place to add a mod?
The thing that makes a sysop account a sysop account is that it's in a group with the various sysop privileges.
Granting of group membership to other accounts is by default only availably to members of the 'bureaucrat' group.
-- brion vibber (brion @ pobox.com)
Hmmm. Yes, I know. Perhaps I didn't phrase this correctly. Let me come at it from another angle. I'd like to be able to place accounts in a group which has all the abilities of the "sysop" group except for the ability to add or remove accounts to groups.
In other words, I have accounts in the sysop group that I don't want to be able to add more accounts to the sysop group.
Thinking about it now, I guess a way to do it is to create a group which has all sysop abilities, such as protect/unprotect, delete, etc., EXCEPT for the ability to add or remove accounts to groups. Is this the correct approach, and if so, 1) how does one create such groups, and 2) what's the $wgGroupPermissions magic cookie to add/ remove to groups.
On Jun 12, 2006, at 4:05 PM, Brion Vibber wrote:
The Centerfielder wrote:
Is there some config variable to restrict the granting of "sysop" priv to only the sysop account, and not other accounts in the sysop group? If not, where in the code should I rummage to find the right place to add a mod?
The thing that makes a sysop account a sysop account is that it's in a group with the various sysop privileges.
Granting of group membership to other accounts is by default only availably to members of the 'bureaucrat' group.
-- brion vibber (brion @ pobox.com)
MediaWiki-l mailing list MediaWiki-l@Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
On 13/06/06, The Centerfielder centerfielder@centerfieldview.com wrote:
Hmmm. Yes, I know. Perhaps I didn't phrase this correctly. Let me come at it from another angle. I'd like to be able to place accounts in a group which has all the abilities of the "sysop" group except for the ability to add or remove accounts to groups.
This is the default behaviour as Brion noted in a previous post; the only users who can edit group memberships are "bureaucrats".
Thinking about it now, I guess a way to do it is to create a group which has all sysop abilities, such as protect/unprotect, delete, etc., EXCEPT for the ability to add or remove accounts to groups. Is this the correct approach, and if so, 1) how does one create such
Yes, except, as I mentioned above and Brion previous to this, that is the default. :)
groups, and 2) what's the $wgGroupPermissions magic cookie to add/ remove to groups.
The permission required to access Special:Userrights is...dum dum dum..."userrights".
Rob Church
The Centerfielder wrote:
Hmmm. Yes, I know. Perhaps I didn't phrase this correctly. Let me come at it from another angle. I'd like to be able to place accounts in a group which has all the abilities of the "sysop" group except for the ability to add or remove accounts to groups.
In the default configuration, that *is* the "sysop" group.
The sysop group does not confer the ability to add or remove accounts to groups unless you've changed the default configuration. Only members of the 'bureaucrat' group have this ability in the default configuration.
-- brion vibber (brion @ pobox.com)
Ah, so, ok, I'm an idiot then. All I need do is remove all except the sysop account from the "beaurocrat" group.
Thanks much.
On Jun 12, 2006, at 10:37 PM, Brion Vibber wrote:
The Centerfielder wrote:
Hmmm. Yes, I know. Perhaps I didn't phrase this correctly. Let me come at it from another angle. I'd like to be able to place accounts in a group which has all the abilities of the "sysop" group except for the ability to add or remove accounts to groups.
In the default configuration, that *is* the "sysop" group.
The sysop group does not confer the ability to add or remove accounts to groups unless you've changed the default configuration. Only members of the 'bureaucrat' group have this ability in the default configuration.
-- brion vibber (brion @ pobox.com)
MediaWiki-l mailing list MediaWiki-l@Wikimedia.org http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
The Centerfielder wrote:
Hmmm. Yes, I know. Perhaps I didn't phrase this correctly. Let me come at it from another angle. I'd like to be able to place accounts in a group which has all the abilities of the "sysop" group except for the ability to add or remove accounts to groups.
A regular sysop cannot add or remove accounts to groups. If they can, remove them from the "bureaucrat" group. The default user created by the installation system is both sysop and bureaucrat, but the new sysops should not be so unless you also mark them as "bureaucrat".
In other words, I have accounts in the sysop group that I don't want to be able to add more accounts to the sysop group.
Set them only as sysops, not as bureaucrats.
Thinking about it now, I guess a way to do it is to create a group which has all sysop abilities, such as protect/unprotect, delete, etc., EXCEPT for the ability to add or remove accounts to groups. Is this the correct approach, and if so, 1) how does one create such groups, and 2) what's the $wgGroupPermissions magic cookie to add/ remove to groups.
Such a group is already created (sysop), as the regular sysops cannot add or remove accounts to groups. If you've set them as bureaucrats and they can add or remove accounts to groups, remove them from this group and they won't be able to do that.
- -- #define Name RotemLiss #define Mail mailSTRUDELrotemlissDOTcom #define Site www.rotemliss.com
#define KeyFingerPrint 4AFD 8579 A449 4267 BED9 38E5 6EF8 5B1F EBDE 7AC0
mediawiki-l@lists.wikimedia.org