Difference between revisions of "MediaWiki"

From CNM Wiki
Jump to: navigation, search
(List of permissions)
 
(125 intermediate revisions by the same user not shown)
Line 8: Line 8:
 
==Permitted user roles==
 
==Permitted user roles==
  
[[Permitted user role]]s are specific access and ability permissions that can be assigned to customizable ''user groups''.
+
[[System-user role]]s are specific access and ability permissions that can be assigned to customizable user groups.
  
=== List of permissions ===
+
===Any user===
  
The following user rights are available in the version of MediaWiki that is used as [[CNM Wikiware]].
+
:Any user (including anonymous) is permitted to use the following functions in the version of the ''Software'' that is used for [[Educaship MediaWiki]].
{|class="wikitable"
+
:{|class="wikitable" width=100% style="text-align:center;"
 
|-
 
|-
 +
|Category
 
!Right
 
!Right
 
!Description
 
!Description
!User groups that have this right by default
+
!User groups that have this right
|-
 
|{{hl3 colspan="4" |'''192--> Reading'''
 
 
|-
 
|-
 +
!Reading
 
|valign="top"|read
 
|valign="top"|read
|When set to false, override for specific pages with <tvar|WhitelistRead>
+
|When set to false, override for specific pages with WhitelistRead
 
| *, user
 
| *, user
 
|-
 
|-
|{{hl3 colspan="4"|'''193--> Editing'''
+
!rowspan="4"|Editing
 +
|createaccount
 +
|createaccount - register / registration
 +
|*, sysop
 +
|-
 +
|createpage
 +
|createpage - requires the edit right
 +
|*, user
 +
|-
 +
|createtalk
 +
|createtalk - requires the edit right
 +
|*, user
 +
|-
 +
|edit
 +
|edit
 +
|*, user
 +
|-
 +
!rowspan="7"|Management
 +
|editmyoptions
 +
|editmyoptions
 +
|*
 +
|-
 +
|editmyprivateinfo
 +
|editmyprivateinfo
 +
|*
 +
|-
 +
|editmyusercss
 +
|editmyusercss
 +
|*
 +
|-
 +
|editmyuserjs
 +
| editmyuserjs
 +
|*
 +
|-
 +
|editmywatchlist
 +
|editmywatchlist
 +
|*
 +
|-
 +
|viewmyprivateinfo
 +
|viewmyprivateinfo
 +
|*
 +
|-
 +
|viewmywatchlist
 +
|viewmywatchlist
 +
|*
 +
|-
 +
!Technical
 +
|writeapi
 +
|writeapi
 +
|*, user, bot
 +
|}
 +
 
 +
===Registered user===
 +
:Any user with his or her registered account, when he or she is identified, is permitted to use the following functions in the version of the ''Software'' that is used for [[Educaship MediaWiki]].
 +
 
 +
:{|class="wikitable" width=100% style="text-align:center;"
 
|-
 
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!Reading
 +
|read
 +
|When set to false, override for specific pages with WhitelistRead
 +
| *, user
 +
|-
 +
!rowspan="8"|Editing
 
|applychangetags
 
|applychangetags
 
|applychangetags
 
|applychangetags
 
|user
 
|user
|-
 
|autocreateaccount
 
|autocreateaccount - 210--> a more limited version of ''createaccount''
 
|—
 
|-
 
|createaccount
 
|createaccount - register / registration
 
|*
 
 
|-
 
|-
 
|createpage
 
|createpage
|createpage - requires the <tvar|1>''edit''</> right
+
|requires the edit right
 
|*, user
 
|*, user
 
|-
 
|-
 
|createtalk
 
|createtalk
|createtalk - requires the <tvar|1>''edit''</> right
+
|requires the edit right
 
|*, user
 
|*, user
|[[rev:11973|1.6+]]
 
 
|-
 
|-
 
|edit
 
|edit
 
|edit
 
|edit
 
|*, user
 
|*, user
|[[rev:9632|1.5+]]
 
 
|-
 
|-
 +
|upload
 +
|requires the edit right
 +
|user, sysop
 +
|-
 +
|reupload
 +
|requires the upload right
 +
|user, sysop
 +
|-
 +
|reupload-shared
 +
|(if one is set up) with local files (requires the upload right)
 +
|user, sysop
 +
|-
 +
|sendemail
 +
|sendemail
 +
|user
 +
|-
 +
!rowspan="2"|Management
 +
|changetags
 +
|changetags - currently unused by extensions
 +
|user
 +
|-
 +
|editmyuserjson
 +
|editmyuserjson
 +
|user
 +
|-
 +
!rowspan="3"|Technical
 +
|minoredit
 +
|minoredit
 +
|user
 +
|-
 +
|purge
 +
|purge - URL parameter
 +
|user
 +
|-
 +
|writeapi
 +
|writeapi
 +
|*, user, bot
 +
|}
 +
 +
===Autoconfirmed===
 +
:Any user with his or her registered account, when he or she is identified, (1) confirmed that his or her age confirms requirements established by the ''Software'' and has at least as many edits as established by the ''Software'', is permitted to use the following functions in the version of the ''Software'' that is used for [[Educaship MediaWiki]].
 +
 +
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!Editing
 
|editsemiprotected
 
|editsemiprotected
|editsemiprotected - 79--> without cascading protection
+
|editsemiprotected - without cascading protection
 +
|autoconfirmed, sysop
 +
|-
 +
!Technical
 +
|autoconfirmed
 +
|autoconfirmed - used for the 'autoconfirmed' group, see the other table below for more information
 +
|autoconfirmed, bot, sysop
 +
|}
 +
 
 +
===Bot===
 +
accounts with the ''bot'' right (intended for automated scripts).
 +
|autoconfirmed, autopatrol, apihighlimits, bot, editsemiprotected, nominornewtalk, suppressredirect, writeapi
 +
 
 +
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!Administration
 +
|autopatrol
 +
|$wgUseRCPatrol must be ''true''
 +
|bot, sysop
 +
|-
 +
!rowspan="6"|Technical
 +
|apihighlimits
 +
|apihighlimits
 +
|bot, sysop
 +
|-
 
|autoconfirmed
 
|autoconfirmed
|1.22+
+
|used for the 'autoconfirmed' group, see the other table below for more information
 +
|autoconfirmed, bot, sysop
 
|-
 
|-
 +
|bot
 +
|bot - can optionally be viewed
 +
|bot
 +
|-
 +
|nominornewtalk
 +
|nominornewtalk - requires ''minor edit'' right
 +
|bot
 +
|-
 +
|suppressredirect
 +
|suppressredirect
 +
|bot, sysop
 +
|-
 +
|writeapi
 +
|writeapi
 +
|*, user, bot
 +
|}
 +
 +
===Sysop===
 +
users who by default can delete and restore pages, block and unblock users, et cetera.
 +
 +
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!rowspan="12"|Editing
 
|editprotected
 
|editprotected
|editprotected - 78--> without cascading protection
+
|editprotected - without cascading protection
 
|sysop
 
|sysop
|[[rev:32164|1.13+]]
+
|-
 +
|editsemiprotected
 +
|editsemiprotected - without cascading protection
 +
|autoconfirmed, sysop
 +
|-
 +
|createaccount
 +
|createaccount - register / registration
 +
|*, sysop
 
|-
 
|-
 
|move
 
|move
|move - 68--> requires the <tvar|1>''edit''</> right
+
|requires the edit right
|user
+
|sysop
|[[rev:9367|1.5+]]
 
 
|-
 
|-
 
|move-categorypages
 
|move-categorypages
|move-categorypages - 209--> (requires the <tvar|1>''move''</> right)
+
|requires the move right
|user
+
|sysop
|1.25+
 
 
|-
 
|-
 
|move-rootuserpages
 
|move-rootuserpages
|move-rootuserpages - 71--> requires the <tvar|1>''move''</> right
+
|requires the move right
|user
+
|sysop
|[[rev:41961|1.14+]]
 
 
|-
 
|-
 
|move-subpages
 
|move-subpages
|move-subpages - 70--> requires the <tvar|1>''move''</> right
+
|requires the move right
|user
+
|sysop
|[[rev:35213|1.13+]]
 
 
|-
 
|-
 
|movefile
 
|movefile
|movefile - 69--> requires the <tvar|1>''move''</> right and <tvar|AllowImageMoving>{{ll|Manual:$wgAllowImageMoving|$wgAllowImageMoving</> to be true
+
|requires the move right and $wgAllowImageMoving to be true
|user
+
|sysop
|[[rev:45276|1.14+]]
 
|-
 
|reupload
 
|reupload - 74--> requires the <tvar|1>''upload''</> right
 
|user
 
|[[rev:10906|1.6+]]
 
|-
 
|reupload-own
 
|reupload-own - 75--> requires the <tvar|1>''upload''</> right (note that this is not needed if the group already has the <tvar|reupload>''reupload''</> right)
 
|—
 
|[[rev:21943|1.11+]]
 
|-
 
|reupload-shared
 
|reupload-shared - 76--> (if one is set up) with local files 211--> (requires the <tvar|1>''upload''</> right)
 
|user
 
|[[rev:10906|1.6+]]
 
|-
 
|sendemail
 
|sendemail
 
|user
 
|[[rev:56962|1.16+]]
 
 
|-
 
|-
 
|upload
 
|upload
|upload - 73--> requires the <tvar|1>''edit''</> right
+
|upload - requires the edit right
|user
+
|user, sysop
|[[rev:9499|1.5+]]
 
 
|-
 
|-
 
|upload_by_url
 
|upload_by_url
|upload_by_url - 77--> requires the <tvar|1>''upload''</> right
+
|upload_by_url - requires the upload right
|
+
|sysop
|[[rev:16162|1.8+]]
+
|-
 +
|reupload
 +
|reupload - requires the upload right
 +
|user, sysop
 
|-
 
|-
|{{hl3 colspan="4"|'''194--> Management'''
+
|reupload-shared
 +
|reupload-shared - (if one is set up) with local files (requires the upload right)
 +
|user, sysop
 
|-
 
|-
 +
!rowspan="17"|Management
 
|bigdelete
 
|bigdelete
 
|bigdelete
 
|bigdelete
 
|sysop
 
|sysop
|[[rev:29872|1.12+]]
 
 
|-
 
|-
 
|block
 
|block
|block - 92--> Block options include preventing editing and registering new accounts, and autoblocking other users on the same IP address
+
|Block options include preventing editing and registering new accounts, and autoblocking other users on the same IP address
 
|sysop
 
|sysop
|[[rev:9367|1.5+]]
 
 
|-
 
|-
 
|blockemail
 
|blockemail
|blockemail - 93--> allows preventing use of the [[Special:Emailuser]] interface when blocking
+
|allows preventing use of the Emailuser interface when blocking
 
|sysop
 
|sysop
|[[rev:22827|1.11+]]
 
 
|-
 
|-
 
|browsearchive
 
|browsearchive
|browsearchive - 89--> through [[Special:Undelete]]
+
|through Special:Undelete
 
|sysop
 
|sysop
|[[rev:32456|1.13+]]
 
|-
 
|changetags
 
|changetags - 104--> currently unused by extensions
 
|user
 
|1.25+
 
 
|-
 
|-
 
|delete
 
|delete
|delete '''1.5–1.11:''' 82--> allows the deletion or undeletion of pages.<br />'''1.12+:''' 83--> allows the deletion of pages. 84--> For undeletions, there is now the <tvar|1>'undelete'</> right, see below
+
|allows the deletion or undeletion of pages. For undeletions, there is now the 'undelete' right, see below
 
|sysop
 
|sysop
|[[rev:9367|1.5+]]
 
 
|-
 
|-
 
|deletedhistory
 
|deletedhistory
 
|deletedhistory
 
|deletedhistory
 
|sysop
 
|sysop
|[[rev:12241|1.6+]]
 
 
|-
 
|-
 
|deletedtext
 
|deletedtext
 
|deletedtext
 
|deletedtext
 
|sysop
 
|sysop
|
 
|-
 
|deletelogentry
 
|deletelogentry - 121--> allows deleting/undeleting information (action text, summary, user who made the action) of specific log entries (''not available by default'')
 
|—
 
|[[gerrit:12889|1.20+]]
 
|-
 
|deleterevision
 
|deleterevision - 122--> allows deleting/undeleting information (revision text, edit summary, user who made the edit) of specific revisions 123--> '''Split into deleterevision and deletelogentry in 1.20''' (''not available by default'')
 
|—
 
|[[rev:13224|1.6+]]
 
|-
 
|editcontentmodel
 
|editcontentmodel
 
|—
 
|[[gerrit:176201|1.23.7+]]
 
 
|-
 
|-
 
|editinterface
 
|editinterface
|editinterface - 106--> contains [[<tvar|man>Special:MyLanguage/Manual:Interface</>|interface messages]]
+
|contains interface messages
|sysop, interface-admin
+
|sysop
|[[rev:9367|1.5+]]
 
|-
 
|editmyoptions
 
|editmyoptions
 
|*
 
|1.22+
 
|-
 
|editmyprivateinfo
 
|editmyprivateinfo
 
|*
 
|1.22+
 
|-
 
|editmyusercss
 
|editmyusercss
 
|*
 
|1.22+
 
|-
 
|editmyuserjs
 
| editmyuserjs
 
|*
 
|1.22+
 
|-
 
|editmyuserjson
 
|editmyuserjson
 
|user
 
|[[gerrit:408940|1.31+]]
 
|-
 
|editmywatchlist
 
|editmywatchlist
 
|*
 
|1.22+
 
|-
 
|editsitecss
 
|editsitecss
 
|interface-admin
 
|[[gerrit:421121|1.32+]]
 
|-
 
|editsitejs
 
|editsitejs
 
|interface-admin
 
|[[gerrit:421121|1.32+]]
 
|-
 
|editsitejson
 
|editsitejson
 
|interface-admin
 
|[[gerrit:421121|1.32+]]
 
|-
 
|editusercss
 
|editusercss
 
|interface-admin
 
|[[rev:54153|1.16+]]
 
|-
 
|edituserjs
 
|edituserjs
 
|interface-admin
 
|[[rev:54153|1.16+]]
 
|-
 
|edituserjson
 
|edituserjson
 
|interface-admin
 
|[[gerrit:408940|1.31+]]
 
|-
 
|hideuser
 
|hideuser - 94-->
 
(''not available by default'')
 
 
 
212-->
 
Only users with 1000 edits or less can be suppressed by default. 213--> Use <tvar|HideUserContribLimit>{{wg|HideUserContribLimit</> to disable.
 
|—
 
|[[rev:20446|1.10+]]
 
 
|-
 
|-
 
|markbotedits
 
|markbotedits
|markbotedits - 101--> see [[<tvar|man>Special:MyLanguage/Manual:Administrators#Rollback</>|Manual:Administrators#Rollback]]
+
|see Rollback
 
|sysop
 
|sysop
|[[rev:27658|1.12+]]
 
 
|-
 
|-
 
|mergehistory
 
|mergehistory
 
|mergehistory
 
|mergehistory
 
|sysop
 
|sysop
|[[rev:27823|1.12+]]
 
|-
 
|pagelang
 
|pagelang - 214--> <tvar|PageLanguageUseDB>{{ll|Manual:$wgPageLanguageUseDB|$wgPageLanguageUseDB</> must be ''true''
 
|—
 
|[[gerrit:135312|1.24+]]
 
 
|-
 
|-
 
|patrol
 
|patrol
|patrol - 102--> <tvar|UseRCPatrol>{{ll|Manual:$wgUseRCPatrol|$wgUseRCPatrol</> must be ''true''
+
|patrol - $wgUseRCPatrol must be ''true''
 
|sysop
 
|sysop
|[[rev:9367|1.5+]]
 
|-
 
|patrolmarks
 
|patrolmarks
 
|—
 
|[[rev:54153|1.16+]]
 
 
|-
 
|-
 
|protect
 
|protect
 
|protect
 
|protect
 
|sysop
 
|sysop
|[[rev:9367|1.5+]]
 
 
|-
 
|-
 
|rollback
 
|rollback
 
|rollback
 
|rollback
 
|sysop
 
|sysop
|[[rev:9367|1.5+]]
 
|-
 
|suppressionlog
 
|suppressionlog
 
|—
 
|[[rev:13224|1.6+]]
 
|-
 
|suppressrevision
 
|suppressrevision - 119--> '''Prior to [[rev:35303|1.13]] this right was named hiderevision''' (''not available by default'')
 
|—
 
|[[rev:13224|1.6+]]
 
 
|-
 
|-
 
|unblockself
 
|unblockself
|unblockself - 96--> Without it, an administrator that has the capability to block cannot unblock themselves if blocked by another administrator
+
|Without it, an administrator that has the capability to block cannot unblock themselves if blocked by another administrator
 
|sysop
 
|sysop
|[[rev:64228|1.17+]]
 
 
|-
 
|-
 
|undelete
 
|undelete
 
|undelete
 
|undelete
 
|sysop
 
|sysop
|[[rev:28151|1.12+]]
 
 
|-
 
|-
|userrights
+
|editsitecss
|userrights - 97--> allows the assignment or removal of all* groups to any user.<br /><small>98-->
+
|editsitecss
*With <tvar|AddGroups>{{ll|Manual:$wgAddGroups|$wgAddGroups</> and <tvar|RemoveGroups>{{ll|Manual:$wgRemoveGroups|$wgRemoveGroups</> you can set the possibility to add/remove certain groups instead of all</small>
+
|sysop
|bureaucrat
 
|[[rev:9367|1.5+]]
 
 
|-
 
|-
|userrights-interwiki
+
|editsitejs
|userrights-interwiki
+
|editsitejs
|
+
|sysop
|[[rev:28650|1.12+]]
 
|-
 
|viewmyprivateinfo
 
|viewmyprivateinfo
 
|*
 
|1.22+
 
|-
 
|viewmywatchlist
 
|viewmywatchlist
 
|*
 
|1.22+
 
|-
 
|viewsuppressed
 
|viewsuppressed - 120--> i.e. a more narrow alternative to "suppressrevision" (''not available by default'')
 
|—
 
|[[gerrit:139277|1.24+]]
 
|-
 
|{{hl3 colspan="4"|'''195--> Administration'''
 
 
|-
 
|-
 +
!rowspan="5"|Administration
 
|autopatrol
 
|autopatrol
|autopatrol - 141--> <tvar|UseRCPatrol>{{ll|Manual:$wgUseRCPatrol|$wgUseRCPatrol</> must be ''true''
+
|$wgUseRCPatrol must be ''true''
 
|bot, sysop
 
|bot, sysop
|[[rev:18496|1.9+]]
 
 
|-
 
|-
 
|import
 
|import
|import - 126--> “transwiki”
+
|transwiki
 
|sysop
 
|sysop
|[[rev:9498|1.5+]]
 
 
|-
 
|-
 
|importupload
 
|importupload
|importupload - 128--> This right was called 'importraw' in and before version 1.5
+
|importupload
 
|sysop
 
|sysop
|[[rev:9499|1.5+]]
 
 
|-
 
|-
 
|managechangetags
 
|managechangetags
|managechangetags - 132--> currently unused by extensions
+
|currently unused by extensions
 
|sysop
 
|sysop
|1.25+
 
|-
 
|siteadmin
 
|siteadmin - 124--> which blocks all interactions with the web site except viewing. 125--> Disabled by default
 
|—
 
|[[rev:9367|1.5+]]
 
 
|-
 
|-
 
|unwatchedpages
 
|unwatchedpages
|unwatchedpages - 131--> lists pages that no user has watchlisted
+
|lists pages that no user has watchlisted
 
|sysop
 
|sysop
|[[rev:12196|1.6+]]
 
|-
 
|{{hl3 colspan="4"|'''196--> Technical'''
 
 
|-
 
|-
 +
!rowspan="5"|Technical
 
|apihighlimits
 
|apihighlimits
 
|apihighlimits
 
|apihighlimits
 
|bot, sysop
 
|bot, sysop
|[[rev:27949|1.12+]]
 
 
|-
 
|-
 
|autoconfirmed
 
|autoconfirmed
|autoconfirmed - 145--> used for the 'autoconfirmed' group, see the other table below for more information
+
|used for the 'autoconfirmed' group, see the other table below for more information
 
|autoconfirmed, bot, sysop
 
|autoconfirmed, bot, sysop
|[[rev:12207|1.6+]]
 
|-
 
|bot
 
|bot - 134--> can optionally be viewed
 
|bot
 
|[[rev:9367|1.5+]]
 
 
|-
 
|-
 
|ipblock-exempt
 
|ipblock-exempt
 
|ipblock-exempt
 
|ipblock-exempt
 
|sysop
 
|sysop
|[[rev:18904|1.9+]]
 
|-
 
|minoredit
 
|minoredit
 
|user
 
|[[rev:12359|1.6+]]
 
|-
 
|nominornewtalk
 
|nominornewtalk - 137--> requires ''minor edit'' right
 
|bot
 
|[[rev:17281|1.9+]]
 
 
|-
 
|-
 
|noratelimit
 
|noratelimit
|noratelimit - 138--> not affected by [[<tvar|man>Special:MyLanguage/Manual:$wgRateLimits</>|rate limits]] (''prior to the introduction of this right, the configuration variable <tvar|RateLimitsExcludedGroups>{{ll|Manual:$wgRateLimitsExcludedGroups|$wgRateLimitsExcludedGroups</> was used for this purpose'')
+
|not affected by rate limits
 
|sysop, bureaucrat
 
|sysop, bureaucrat
|[[rev:35908|1.13+]]
 
|-
 
|purge
 
|purge - 135--> [[<tvar|man>Special:MyLanguage/Manual:URL</>|URL parameter]] "<code>&action=purge</code>"
 
|user
 
|[[rev:19195|1.10+]]
 
 
|-
 
|-
 
|suppressredirect
 
|suppressredirect
 
|suppressredirect
 
|suppressredirect
 
|bot, sysop
 
|bot, sysop
|[[rev:27774|1.12+]]
 
|-
 
|writeapi
 
|writeapi
 
|*, user, bot
 
 
|}
 
|}
  
== List of groups == <!--T:152-->
+
===Bureaucrat===
 +
Users who by default can change other users' rights.
  
<!--T:153-->
+
:{|class="wikitable" width=100% style="text-align:center;"
The following groups are available in the latest version of MediaWiki.</translate>
+
|-
<translate>
+
|Category
<!--T:154-->
+
!Right
If you are using an older version then some of these may not be implemented.
+
!Description
</translate>
+
!User groups that have this right
 +
|-
 +
!Management
 +
|userrights
 +
|Allows the assignment or removal of all* groups to any user. With $wgAddGroups and $wgRemoveGroups, you can set the possibility to add/remove certain groups instead of all
 +
|bureaucrat
 +
|-
 +
!Administration
 +
|noratelimit
 +
|Not affected by rate limits
 +
|sysop, bureaucrat
 +
|}
  
{|class="wikitable"
+
===Legacy functions and roles===
 +
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!rowspan="2"|Editing
 +
|autocreateaccount
 +
|a more limited version of ''createaccount''
 
|-
 
|-
!{{hl2}} | <translate><!--T:155--> Group</translate>
+
|reupload-own
!{{hl2}} | <translate><!--T:156--> Description</translate>
+
|requires the upload right (note that this is not needed if the group already has the ''reupload'' right)
!{{hl2}} | <translate><!--T:215--> Default rights</translate>
 
!{{hl2}} | <translate><!--T:157--> Versions</translate>
 
 
|-
 
|-
| *
+
!rowspan="11"|Management'''
|<translate><!--T:158--> all users (including anonymous).</translate>
+
|deletelogentry
|createaccount, createpage, createtalk, edit, editmyoptions, editmyprivateinfo, editmyusercss, editmyuserjs, editmywatchlist, read, viewmyprivateinfo, viewmywatchlist, writeapi
+
|allows deleting/undeleting information (action text, summary, user who made the action) of specific log entries (''not available by default'')
|[[rev:9367|1.5+]]
 
 
|-
 
|-
|user
+
|editcontentmodel
|<translate><!--T:159--> registered accounts.</translate>
+
|editcontentmodel
|applychangetags, changetags, createpage, createtalk, edit, minoredit, move, move-categorypages, move-rootuserpages, move-subpages, movefile, purge, read, reupload, reupload-shared, sendemail, upload, writeapi
+
|-
|
+
|editsitejson
 +
|editsitejson
 +
|interface-admin
 +
|-
 +
|edituserjson
 +
|edituserjson
 +
|interface-admin
 +
|-
 +
|hideuser
 +
|(''not available by default'') Only users with 1000 edits or less can be suppressed by default. Use HideUserContribLimit to disable.
 +
|-
 +
|pagelang
 +
|$wgPageLanguageUseDB must be ''true''
 +
|-
 +
|patrolmarks
 +
|patrolmarks
 +
|-
 +
|suppressionlog
 +
|suppressionlog
 
|-
 
|-
|autoconfirmed
+
|suppressrevision
|<translate><!--T:160--> registered accounts at least as old as <tvar|AutoConfirmAge>{{ll|Manual:$wgAutoConfirmAge|$wgAutoConfirmAge}}</> and having at least as many edits as <tvar|AutoConfirmCount>{{ll|Manual:$wgAutoConfirmCount|$wgAutoConfirmCount}}</>.</translate>
+
|(''not available by default'')
|autoconfirmed, editsemiprotected
 
|[[rev:12207|1.6+]]
 
 
|-
 
|-
|bot
+
|userrights-interwiki
|<translate><!--T:163--> accounts with the ''bot'' right (intended for automated scripts).</translate>
+
|userrights-interwiki
|autoconfirmed, autopatrol, apihighlimits, bot, editsemiprotected, nominornewtalk, suppressredirect, writeapi
 
|[[rev:9367|1.5+]]
 
 
|-
 
|-
|sysop
+
|viewsuppressed
|<translate><!--T:164--> users who by default can delete and restore pages, block and unblock users, et cetera.</translate>
+
|i.e. a more narrow alternative to "suppressrevision" (''not available by default'')
|apihighlimits, autoconfirmed, autopatrol, bigdelete, block, blockemail, browsearchive, createaccount, delete, deletedhistory, deletedtext, editinterface, editprotected, editsemiprotected, editusercss, edituserjs, import, importupload, ipblock-exempt, managechangetags, markbotedits, mergehistory, move, move-categorypages, move-rootuserpages, move-subpages, movefile, noratelimit, patrol, protect, proxyunbannable, reupload, reupload-shared, rollback, suppressredirect, unblockself, undelete, unwatchedpages, upload, upload_by_url
 
|[[rev:9367|1.5+]]
 
 
|-
 
|-
|bureaucrat
+
!Administration
|<translate><!--T:165--> users who by default can change other users' rights.</translate>
+
|siteadmin
|noratelimit, userrights
+
|which blocks all interactions with the web site except viewing. Disabled by default
|[[rev:9367|1.5+]]
 
 
|}
 
|}
  
<translate>
+
==Fuctional features==
<!--T:167-->
+
===Version control===
From MW 1.12, you can create your own groups into which users are automatically promoted (as with autoconfirmed and emailconfirmed) using <tvar|AutoPromote>{{ll|Manual:$wgAutopromote|$wgAutopromote}}</>.</translate>
+
:The ''Software'' includes its own [[version control system]].
<translate>
 
<!--T:168-->
 
You can even create any custom group by just assigning rights to them.
 
 
 
== Default rights == <!--T:169-->
 
 
 
<!--T:170-->
 
The default rights are defined in <tvar|DefaultSettings>{{ll|Manual:DefaultSettings.php|DefaultSettings.php}}</>.</translate>
 
<translate>
 
<!--T:171-->
 
* Default values in HEAD version:</translate> https://phabricator.wikimedia.org/diffusion/MW/browse/master/includes/DefaultSettings.php
 
<translate>
 
<!--T:172-->
 
* The default values in the latest stable MediaWiki release, version {{MW stable branch number}}, are available here:</translate> https://phabricator.wikimedia.org/diffusion/MW/browse/{{#invoke:Version|get|stable|git}}/includes/DefaultSettings.php
 
<translate>
 
<!--T:173-->
 
* Additional rights: you should be able to list all the permissions available on your wiki by running <tvar|getAllRights><code>User::getAllRights()</code></>.
 
</translate>
 
 
 
{{anchor|Adding new rights}}
 
<translate>
 
=== Adding new rights === <!--T:175-->
 
</translate>
 
''<translate><!--T:176--> Information for coders only follows.</translate>''
 
 
 
<translate>
 
<!--T:177-->
 
If you're adding a new right in core, for instance to [[<tvar|man>Special:MyLanguage/Manual:Special pages</>|control a new special page]], you are ''required'' to add it to the list of available rights in <tvar|User>{{ll|Manual:User.php|User.php}}</>, <code>$mCoreRights</code> ([<tvar|url>https://gerrit.wikimedia.org/r/#/c/135312/73/includes/User.php</> example]).</translate>
 
<translate>
 
<!--T:178-->
 
If you're {{<tvar|man>ll|Manual:Developing extensions</>|doing so in an extension}}, you instead need to use <tvar|AvailableRights>{{ll|Manual:$wgAvailableRights|$wgAvailableRights}}</>.
 
 
 
<!--T:179-->
 
You probably also want to assign it to some user group by editing <tvar|GroupPermissions>{{ll|Manual:$wgGroupPermissions|$wgGroupPermissions}}</> described above.
 
 
 
<!--T:217-->
 
If you want this right to be accessible to external applications by <tvar|OAuth>{{ll|Help:OAuth|OAuth}}</> or by [[<tvar|botpasswords>Manual:Bot passwords</>|bot passwords]], then you will need to add it to a grant by editing <tvar|GrantPermissions>{{ll|Manual:$wgGrantPermissions|$wgGrantPermissions}}</>.</translate>
 
 
 
<source lang="php">
 
// create ninja-powers right
 
$wgAvailableRights[] = 'ninja-powers';
 
 
 
//add ninja-powers to the ninja-group
 
$wgGroupPermissions['ninja']['ninja-powers'] = true;
 
  
//add ninja-powers to the 'basic' grant so we can use our ninja powers over an API request
+
===Security===
$wgGrantPermissions['basic']['ninja-powers'] = true;
+
:As any [[open-source]] software, the ''Wiki'' is vulnerable to external attacks:
</source>
+
:*https://www.mediawiki.org/wiki/Manual:Security
 
+
:*https://www.mediawiki.org/wiki/Security_for_developers
== Security ==
 
As any [[open-source]] software, the ''Wiki'' is vulnerable to external attacks:
 
*https://www.mediawiki.org/wiki/Manual:Security
 
*https://www.mediawiki.org/wiki/Security_for_developers
 
  
 
== Getting started ==
 
== Getting started ==
Line 523: Line 473:
 
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]
 
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]
 
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language]
 
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Combating_spam Learn how to combat spam on your wiki]
+
 
 +
==See also==
 +
 
 +
===Related lectures===
 +
:*[[What Wiki Edits Are]].
 +
:*[[Concept Management Quarter]].  
 +
 
 +
[[Category: CNM Cyber Placement]][[Category: Septem Artes Administrativi]][[Category: Articles]]

Latest revision as of 23:32, 14 April 2024

MediaWiki (hereinafter, the Software) is a free and open-source wiki software. The Software was originally developed for Wikipedia, but now the Software runs on many websites and has become the dominant software in its category. The Software is written in the PHP programming language and stores the contents into a set of databases.

The software is optimized to efficiently handle large projects, which can have terabytes of content and hundreds of thousands of hits per second. According to MediaWiki, achieving scalability through multiple layers of caching and database replication has been a major concern for developers. The software has more than 900 configuration settings and more than 1,900 extensions available for enabling various features to be added or changed.

On Wikipedia alone, more than 1000 automated and semi-automated bots and other tools have been developed to assist in editing. It has also been deployed by some companies as an internal knowledge management system, and some educators have assigned students to use the Software for collaborative group projects.


Permitted user roles

System-user roles are specific access and ability permissions that can be assigned to customizable user groups.

Any user

Any user (including anonymous) is permitted to use the following functions in the version of the Software that is used for Educaship MediaWiki.
Category Right Description User groups that have this right
Reading read When set to false, override for specific pages with WhitelistRead *, user
Editing createaccount createaccount - register / registration *, sysop
createpage createpage - requires the edit right *, user
createtalk createtalk - requires the edit right *, user
edit edit *, user
Management editmyoptions editmyoptions *
editmyprivateinfo editmyprivateinfo *
editmyusercss editmyusercss *
editmyuserjs editmyuserjs *
editmywatchlist editmywatchlist *
viewmyprivateinfo viewmyprivateinfo *
viewmywatchlist viewmywatchlist *
Technical writeapi writeapi *, user, bot

Registered user

Any user with his or her registered account, when he or she is identified, is permitted to use the following functions in the version of the Software that is used for Educaship MediaWiki.
Category Right Description User groups that have this right
Reading read When set to false, override for specific pages with WhitelistRead *, user
Editing applychangetags applychangetags user
createpage requires the edit right *, user
createtalk requires the edit right *, user
edit edit *, user
upload requires the edit right user, sysop
reupload requires the upload right user, sysop
reupload-shared (if one is set up) with local files (requires the upload right) user, sysop
sendemail sendemail user
Management changetags changetags - currently unused by extensions user
editmyuserjson editmyuserjson user
Technical minoredit minoredit user
purge purge - URL parameter user
writeapi writeapi *, user, bot

Autoconfirmed

Any user with his or her registered account, when he or she is identified, (1) confirmed that his or her age confirms requirements established by the Software and has at least as many edits as established by the Software, is permitted to use the following functions in the version of the Software that is used for Educaship MediaWiki.
Category Right Description User groups that have this right
Editing editsemiprotected editsemiprotected - without cascading protection autoconfirmed, sysop
Technical autoconfirmed autoconfirmed - used for the 'autoconfirmed' group, see the other table below for more information autoconfirmed, bot, sysop

Bot

accounts with the bot right (intended for automated scripts). |autoconfirmed, autopatrol, apihighlimits, bot, editsemiprotected, nominornewtalk, suppressredirect, writeapi

Category Right Description User groups that have this right
Administration autopatrol $wgUseRCPatrol must be true bot, sysop
Technical apihighlimits apihighlimits bot, sysop
autoconfirmed used for the 'autoconfirmed' group, see the other table below for more information autoconfirmed, bot, sysop
bot bot - can optionally be viewed bot
nominornewtalk nominornewtalk - requires minor edit right bot
suppressredirect suppressredirect bot, sysop
writeapi writeapi *, user, bot

Sysop

users who by default can delete and restore pages, block and unblock users, et cetera.

Category Right Description User groups that have this right
Editing editprotected editprotected - without cascading protection sysop
editsemiprotected editsemiprotected - without cascading protection autoconfirmed, sysop
createaccount createaccount - register / registration *, sysop
move requires the edit right sysop
move-categorypages requires the move right sysop
move-rootuserpages requires the move right sysop
move-subpages requires the move right sysop
movefile requires the move right and $wgAllowImageMoving to be true sysop
upload upload - requires the edit right user, sysop
upload_by_url upload_by_url - requires the upload right sysop
reupload reupload - requires the upload right user, sysop
reupload-shared reupload-shared - (if one is set up) with local files (requires the upload right) user, sysop
Management bigdelete bigdelete sysop
block Block options include preventing editing and registering new accounts, and autoblocking other users on the same IP address sysop
blockemail allows preventing use of the Emailuser interface when blocking sysop
browsearchive through Special:Undelete sysop
delete allows the deletion or undeletion of pages. For undeletions, there is now the 'undelete' right, see below sysop
deletedhistory deletedhistory sysop
deletedtext deletedtext sysop
editinterface contains interface messages sysop
markbotedits see Rollback sysop
mergehistory mergehistory sysop
patrol patrol - $wgUseRCPatrol must be true sysop
protect protect sysop
rollback rollback sysop
unblockself Without it, an administrator that has the capability to block cannot unblock themselves if blocked by another administrator sysop
undelete undelete sysop
editsitecss editsitecss sysop
editsitejs editsitejs sysop
Administration autopatrol $wgUseRCPatrol must be true bot, sysop
import transwiki sysop
importupload importupload sysop
managechangetags currently unused by extensions sysop
unwatchedpages lists pages that no user has watchlisted sysop
Technical apihighlimits apihighlimits bot, sysop
autoconfirmed used for the 'autoconfirmed' group, see the other table below for more information autoconfirmed, bot, sysop
ipblock-exempt ipblock-exempt sysop
noratelimit not affected by rate limits sysop, bureaucrat
suppressredirect suppressredirect bot, sysop

Bureaucrat

Users who by default can change other users' rights.

Category Right Description User groups that have this right
Management userrights Allows the assignment or removal of all* groups to any user. With $wgAddGroups and $wgRemoveGroups, you can set the possibility to add/remove certain groups instead of all bureaucrat
Administration noratelimit Not affected by rate limits sysop, bureaucrat

Legacy functions and roles

Category Right Description User groups that have this right
Editing autocreateaccount a more limited version of createaccount
reupload-own requires the upload right (note that this is not needed if the group already has the reupload right)
Management deletelogentry allows deleting/undeleting information (action text, summary, user who made the action) of specific log entries (not available by default)
editcontentmodel editcontentmodel
editsitejson editsitejson interface-admin
edituserjson edituserjson interface-admin
hideuser (not available by default) Only users with 1000 edits or less can be suppressed by default. Use HideUserContribLimit to disable.
pagelang $wgPageLanguageUseDB must be true
patrolmarks patrolmarks
suppressionlog suppressionlog
suppressrevision (not available by default)
userrights-interwiki userrights-interwiki
viewsuppressed i.e. a more narrow alternative to "suppressrevision" (not available by default)
Administration siteadmin which blocks all interactions with the web site except viewing. Disabled by default

Fuctional features

Version control

The Software includes its own version control system.

Security

As any open-source software, the Wiki is vulnerable to external attacks:

Getting started

See also

Related lectures