[Mediawiki-l] Protect tab not working the way I expected

[Platonides]

Michael Kingery (HL7) wrote:
> Here's the basic information about my install:
> 
> MediaWiki         1.12.0
> PHP                 5
> Database          MySQL
> 
> What I'm looking to do is to allow any user with edit permissions to be
> able to Protect a page so that only Sysops are able to edit / unprotect
> it. To do this I turned on the Protect tab with the following code in
> the LocalSettings.php file:
> 
> # Only allow users and sysops to protect a page
> $wgGroupPermissions['*']['protect'] = false;
> $wgGroupPermissions['user']['protect'] = true;
> $wgGroupPermissions['sysop']['protect'] = true;
> 
> The Protect tab does show up now, and you can protect a page, but when
> ANYONE with edit privileges goes to edit they are able to do so
> regardless of unprotecting the page or being a sysop. When editing, it
> does show the following message, but lets you edit and save anyways:
> 
> WARNING: This page has been locked so that only users with sysop
> privileges can edit it.
> 
> Any thoughts?

First thought: You are using an insecure mediawiki version released more
than two years old. There have been four major versions since.

Second one: The protect right allows you to protect a page, unprotect a
page and edit protected pages.