[Mediawiki-l] problem with $wgGroupPermissions

[Rob Lanphier]

On Wed, 2006-02-08 at 05:47 +0100, Thomas Tschoellitsch wrote:
> I've got the following settings
> from Meta (http://meta.wikimedia.org/wiki/Help:User_rights):
> 
> $wgShowIPinHeader = false; # For non-logged in users
> $wgWhitelistRead = array( "Main Page", "Special:Userlogin", "-",
> "MediaWiki:Monobook.css" );
> $wgGroupPermissions['*']['createaccount'] = false;
> $wgGroupPermissions['*']['edit'] = false;
> $wgGroupPermissions['*']['read'] = false;
> 
> What I expected to happen was, that...
> - new user registrations shouldn't be possible
> - no one except the sysops can read/edit the Wiki (including talk pages)
[...]
> Unfortunately the result is, that I can't log in anymore (via
> Special:UserLogin).

Add this:
$wgGroupPermissions['sysop']['edit'] = true;
$wgGroupPermissions['sysop']['read'] = true;

The sysop group doesn't explicitly have 'read' and 'edit'...those are
global permissions by default.  Since you turned off global read, you
need to explicitly declare sysop read/edit.  See
DefaultSettings.php...any global ('*') permission you disable should be
explicitly reenabled for sysop or whatever other group you need to make
sure gets the permission.

Rob