Well for starters the read rights for addon namespaces would be a nice first step.
On 21. 07. 2011 20:35, Andrew Garrett wrote:
On Thu, Jul 21, 2011 at 11:14 AM, Casey Brownlists@caseybrown.org wrote:
Just a note that I think our stance on per-page access restrictions has always been: "Do this at your own risk. This is not supported and will probably never be. We suggest you use another piece of software if you really need this." MediaWiki really isn't designed to be a content management system with very granular access settings, which is why we don't officially support it.
I don't want to derail this thread, but I will say this:
Even though this is what people say in #mediawiki, I know many respected developers who don't share this approach, especially the "will probably never be supported" part. The security issues are well-known and in some extensions worked around — regardless, having an understanding of what parts of code read page text contributes to our overall code quality and security, and is definitely a worthwhile enterprise.