[Mediawiki-l] Only allow "Sysop" account to grant sysop priv

Rotem Liss mail at rotemliss.com
Tue Jun 13 11:33:29 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Centerfielder wrote:
> Hmmm. Yes, I know. Perhaps I didn't phrase this correctly. Let me  
> come at it from another angle. I'd like to be able to place accounts  
> in a group which has all the abilities of the "sysop" group except  
> for the ability to add or remove accounts to groups.

A regular sysop cannot add or remove accounts to groups. If they can,
remove them from the "bureaucrat" group. The default user created by the
installation system is both sysop and bureaucrat, but the new sysops
should not be so unless you also mark them as "bureaucrat".

> In other words, I have accounts in the sysop group that I don't want  
> to be able to add more accounts to the sysop group.

Set them only as sysops, not as bureaucrats.

> Thinking about it now, I guess a way to do it is to create a group  
> which has all sysop abilities, such as protect/unprotect, delete,  
> etc., EXCEPT for the ability to add or remove accounts to groups. Is  
> this the correct approach, and if so, 1) how does one create such  
> groups, and 2) what's the $wgGroupPermissions magic cookie to add/ 
> remove to groups.

Such a group is already created (sysop), as the regular sysops cannot
add or remove accounts to groups. If you've set them as bureaucrats and
they can add or remove accounts to groups, remove them from this group
and they won't be able to do that.

- --
#define Name RotemLiss
#define Mail mailSTRUDELrotemlissDOTcom
#define Site www.rotemliss.com

#define KeyFingerPrint 4AFD 8579 A449 4267 BED9 38E5 6EF8 5B1F EBDE 7AC0
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEjqKJbvhbH+veesARArV2AKC1NxRRHGQnARrEl+797lXU/MWPtACfY22r
PtaeMDHPCsRkcJszeuM/YlY=
=azGD
-----END PGP SIGNATURE-----



More information about the MediaWiki-l mailing list