On Wed, Feb 24, 2010 at 11:30 PM, Dmitriy Sintsov <questpc(a)rambler.ru> wrote:
I understand that MediaWiki is not the best (although
not the worst) for
math, but speaking of fine-grained access control, what do you think of
HaloACL?
http://www.mediawiki.org/wiki/Extension:Halo_Access_Control_List
Dmitriy
I haven't looked at that. It's a user-submitted extension, so use it
at your own risk. From reading the description, it's not clear
whether it allows restriction of viewing -- it sounds like it only
allows restriction of editing. MediaWiki is not set up to allow
granular restriction of viewing, and no extension can easily allow it
in a secure fashion. For information on some of the many things that
can go wrong with an extension that claims to do read restrictions,
see <http://www.mediawiki.org/wiki/Security_issues_with_authorization_extensions>.
The *only* reliable type of read restriction in MediaWiki, with or
without extensions, is when you forbid entire groups (e.g.,
unregistered users) from reading or editing the wiki at all. If you
can edit any page, or view anything beyond a very small and
carefully-selected whitelist, you can probably get some information
about pages that are hidden to you.