On Thu, Jul 21, 2011 at 9:31 AM, Sumana Harihareswara <sumanah(a)wikimedia.org> wrote: If we did such a thing, it would probably need more core support to function properly. Per-page permissions are not something MW supports and extensions trying to do it do so at their own risk. I don't think MW core needs this sort of functionality, but it will probably need more hook points to do it properly. -Chad

On Thu, Jul 21, 2011 at 9:48 AM, Brion Vibber <brion(a)wikimedia.org> wrote: Right, which is why I suggested to support such a thing we'll need more changes to core :) -Chad

On Thu, Jul 21, 2011 at 1:04 PM, Sumana Harihareswara &lt;sumanah(a)wikimedia.org&gt; wrote: Just a note that I think our stance on per-page access restrictions has always been: "Do this at your own risk. This is not supported and will probably never be. We suggest you use another piece of software if you really need this." MediaWiki really isn't designed to be a content management system with very granular access settings, which is why we don't officially support it. You might want to point out these pages to him too: * <http://www.mediawiki.org/wiki/Manual:Preventing_access#Restrict_viewing_of_certain_specific_pages> * <http://www.mediawiki.org/wiki/Security_issues_with_authorization_extensions> -- Casey Brown Cbrown1023

On Thu, Jul 21, 2011 at 11:14 AM, Casey Brown &lt;lists(a)caseybrown.org&gt; wrote: I don't want to derail this thread, but I will say this: Even though this is what people say in #mediawiki, I know many respected developers who don't share this approach, especially the "will probably never be supported" part. The security issues are well-known and in some extensions worked around — regardless, having an understanding of what parts of code read page text contributes to our overall code quality and security, and is definitely a worthwhile enterprise. -- Andrew Garrett Wikimedia Foundation agarrett(a)wikimedia.org