On Wed, Feb 24, 2010 at 11:30 PM, Dmitriy Sintsov questpc@rambler.ru wrote:
I understand that MediaWiki is not the best (although not the worst) for math, but speaking of fine-grained access control, what do you think of HaloACL? http://www.mediawiki.org/wiki/Extension:Halo_Access_Control_List Dmitriy
I haven't looked at that. It's a user-submitted extension, so use it at your own risk. From reading the description, it's not clear whether it allows restriction of viewing -- it sounds like it only allows restriction of editing. MediaWiki is not set up to allow granular restriction of viewing, and no extension can easily allow it in a secure fashion. For information on some of the many things that can go wrong with an extension that claims to do read restrictions, see http://www.mediawiki.org/wiki/Security_issues_with_authorization_extensions.
The *only* reliable type of read restriction in MediaWiki, with or without extensions, is when you forbid entire groups (e.g., unregistered users) from reading or editing the wiki at all. If you can edit any page, or view anything beyond a very small and carefully-selected whitelist, you can probably get some information about pages that are hidden to you.