[Mediawiki-l] limiting write access to a media wiki

Sun Nov 14 14:16:27 UTC 2004

Hi Colin, 

actually it is pretty easy to tweak the wiki so that only people you give permission can write and read. I have set up a wiki for internal use for our organisation, which can be reached within the netwerk as well from the outside (routed an ip-adress to the wiki on the server with apache).  

--------------
1. Limit write acces: i haven't figured out on local network level, instead, only people who have an account can write and read and control who can make users. 

>From http://meta.wikimedia.org/wiki/Setting_user_rights_in_MediaWiki: 

Configuring access restrictions to your wiki
Also see Preventing_Access You can customise user restrictions by placing some or all of the commands below into LocalSettings.php.

# Specify who can edit: true means only logged in users may edit pages
$wgWhitelistEdit = true;

# Pages anonymous (not-logged-in) users may see
$wgWhitelistRead = array ("Main Page", "Special:Userlogin", "Wikipedia:Help");

# Specify who may create new accounts: 0 means no, 1 means yes
$wgWhitelistAccount = array ( 'user' => 0, 'sysop' => 1, 'developer' => 1 );

2. Create a user with sysop rights with the following sql query: 

mysql> UPDATE user SET user_rights='bureaucrat,sysop' WHERE user_name='The Username';

The "user" in the above text is the user table in the wikidb database.

The user_rights field is actually a comma-separated list; presently four values are recognized by the software:

The Username is the person you want to give sysop rights.

3. If you want to add users, login with sysop rights and find the page Special:Userlogin and create a new user. 

----------------

People from the outside still can see the frontpage, but can't read, edit or create an account. 

Good luck!

Geert

-----Oorspronkelijk bericht-----
Van: mediawiki-l-bounces at Wikimedia.org
[mailto:mediawiki-l-bounces at Wikimedia.org]Namens Terry Jones
Verzonden: vrijdag 12 november 2004 22:39
Aan: MediaWiki announcements and site admin list
Onderwerp: Re: [Mediawiki-l] limiting write access to a media wiki

>>>>> "Colin" == Colin Johnson <colinj at ccs.neu.edu> writes:

Colin> I'm working on building a set of howtos for the users here. I
Colin> like the format and control that a mediawiki gives me. What I
Colin> want to do is be able to limit who has write access to the wiki
Colin> and from where.

Colin> I'd like to be able to do the following:

Colin> 1. limit write access to machines only on our local network
Colin> 2. limit write access to users who login so we can track changes
Colin> 3. limit user accounts to specific people.

Colin> I'm working at a college of computer science and so I don't
Colin> want to, right off the bat, enable all of the students with
Colin> write access. I would like to get there eventually but I'd like
Colin> to start out with only a small number of users who have write
Colin> access and then grow that group over time.

Hi Colin.

I'm not going to try to answer your questions, but instead make a few
comments that you might consider.

The main suggestion is that you consider letting the wiki be open
initially and shutting off access as need be, rather than locking it
down from the outset with a plan to selectively open it. I think a far
more interesting and potentially rich experience is to move (if
needed) from open to closed. There's nothing to be too concerned
about: if it doesn't work, you tighten things up. Lawyers might
disagree, I know. Plus, your aim to develop Howto documents in a wiki
is a perfect scenario for having many people making improvements and
adding information that a few people would take for granted, get
wrong, leave out, under-describe, etc. You can't predict the content
of the wiki, and that's great and well aligned with user manuals (or
howtos) which are notoriously bad at predicting the needs of actual
users. So it feels to me like you've chosen the right tool (the wiki)
and are now looking for a way to (initially) turn off the power it
brings you rather than just letting the thing fly and seeing what
happens. You might be surprised. If you lock it down, the whole
project loses interest, becomes somehow much less attractive, you're
just making another set of manuals.

Here's a perhaps relevant example. I'm teaching a (graduate level,
admittedly) class on computer science theory and algorithms. I set up a
wiki for the class - with just a few basic pages: the syllabus, the
evaluation, some admin details, a page with some of my info on it.  I
introduced the wiki on day 1 and pushed them to start using it
(everyone made a page about themselves and linked it in). Plus, each
class has an assigned note taker, and the note taker (and others, of
course) puts stuff into the wiki. The people in the class can do
anything they want to the wiki: change the syllabus, change the page
that says how they will be evaluated, write stuff about each other or
me, deface things, delete things etc. But.... none of this has
happened. I was expecting I'd perhaps have to lock down some pages or
restrict write access to logged-in users, etc., but no. On the other
hand, good things you would not anticipate have happened: students
start taking notes on the class before the class happens! - they're out
there digging up stuff they think is interesting on upcoming subject
and writing and linking it up in the wiki. I go and look at the
syllabus for the day to see what I said I'd teach, and I find notes
already done with stuff someone thinks is important and wants to hear
about. I've had a kid sitting in class taking notes and updating the
wiki as the class happens (while I simultaneously have the wiki up on
an overhead projection system).  There are also little things that I
would never have thought of (and didn't have to), like someone putting
a link to the Greek alphabet onto the front page of the wiki - to help
everyone learn the various letters seen in the math. It's pretty cool.

Maybe that's some food for thought for you. And no, you can't have the
URL of the class wiki :-)

Regards,
Terry Jones.
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l at Wikimedia.org
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l