[Mediawiki-l] problem with $wgGroupPermissions

Pedro Flores pflores at mcs.anl.gov
Wed Feb 8 18:26:38 UTC 2006


On Wed, Feb 08, 2006 at 01:20:22AM -0800, Rob Lanphier wrote:
> On Wed, 2006-02-08 at 05:47 +0100, Thomas Tschoellitsch wrote:
> > I've got the following settings
> > from Meta (http://meta.wikimedia.org/wiki/Help:User_rights):
> > 
> > $wgShowIPinHeader = false; # For non-logged in users
> > $wgWhitelistRead = array( "Main Page", "Special:Userlogin", "-",
> > "MediaWiki:Monobook.css" );
> > $wgGroupPermissions['*']['createaccount'] = false;
> > $wgGroupPermissions['*']['edit'] = false;
> > $wgGroupPermissions['*']['read'] = false;
> > 
> > What I expected to happen was, that...
> > - new user registrations shouldn't be possible
> > - no one except the sysops can read/edit the Wiki (including talk pages)
> [...]
> > Unfortunately the result is, that I can't log in anymore (via
> > Special:UserLogin).
> 
> Add this:
> $wgGroupPermissions['sysop']['edit'] = true;
> $wgGroupPermissions['sysop']['read'] = true;
> 
> The sysop group doesn't explicitly have 'read' and 'edit'...those are
> global permissions by default.  Since you turned off global read, you
> need to explicitly declare sysop read/edit.  See
> DefaultSettings.php...any global ('*') permission you disable should be
> explicitly reenabled for sysop or whatever other group you need to make
> sure gets the permission.
> 
> Rob
> 
> _______________________________________________
> MediaWiki-l mailing list
> MediaWiki-l at Wikimedia.org
> http://mail.wikipedia.org/mailman/listinfo/mediawiki-l
> 

I have this in my LocalSettings.php file :
$wgGroupPermissions['*'    ]['createaccount']   = false;
$wgWhitelistRead = array ("Main Page", "Special:Userlogin","Wiki:General disclaimer");
$wgGroupPermissions['*'    ]['read']            = false;
$wgGroupPermissions['*'    ]['edit']            = false;

And I still am allowed to get to the Main Page without having to
explicitly having to add those 2 lines.  And how will the wiki will know
you are a sysop to allow you access to read if you haven't logged in
yet?  I think the problem might be on the
 $wgWhitelistRead = array( "Main Page", "Special:Userlogin", "-",
 "MediaWiki:Monobook.css" );
lines.  Make sure that there is not a line break between these 2 lines
in LocalSettings.php and that is is indeed one line.  Or try putting
that line directly above
$wgGroupPermissions['*'    ]['read']            = false;

Hope this works.

-- 
pedro



More information about the MediaWiki-l mailing list