Difference between revisions of "MediaWiki"

From CNM Wiki
Jump to: navigation, search
(→‎List of permissions)
 
(109 intermediate revisions by the same user not shown)
Line 8: Line 8:
 
==Permitted user roles==
 
==Permitted user roles==
  
−
[[Permitted user role]]s are specific access and ability permissions that can be assigned to customizable user groups.
+
[[System-user role]]s are specific access and ability permissions that can be assigned to customizable user groups.
  
−
=== List of permissions ===
+
===Any user===
  
−
The following user rights are available in the version of MediaWiki that is used for [[CNM Wikiware]].
+
:Any user (including anonymous) is permitted to use the following functions in the version of the ''Software'' that is used for [[Educaship MediaWiki]].
−
{|class="wikitable"
+
:{|class="wikitable" width=100% style="text-align:center;"
 
|-
 
|-
 +
|Category
 
!Right
 
!Right
 
!Description
 
!Description
 
!User groups that have this right
 
!User groups that have this right
 
|-
 
|-
−
|colspan="3" style="text-align:center;"|'''Reading'''
+
!Reading
−
|-
 
 
|valign="top"|read
 
|valign="top"|read
−
|When set to false, override for specific pages with <tvar|WhitelistRead>
+
|When set to false, override for specific pages with WhitelistRead
 
| *, user
 
| *, user
 
|-
 
|-
−
|colspan="3" style="text-align:center;"|'''Editing'''
+
!rowspan="4"|Editing
 +
|createaccount
 +
|createaccount - register / registration
 +
|*, sysop
 +
|-
 +
|createpage
 +
|createpage - requires the edit right
 +
|*, user
 +
|-
 +
|createtalk
 +
|createtalk - requires the edit right
 +
|*, user
 +
|-
 +
|edit
 +
|edit
 +
|*, user
 +
|-
 +
!rowspan="7"|Management
 +
|editmyoptions
 +
|editmyoptions
 +
|*
 +
|-
 +
|editmyprivateinfo
 +
|editmyprivateinfo
 +
|*
 +
|-
 +
|editmyusercss
 +
|editmyusercss
 +
|*
 +
|-
 +
|editmyuserjs
 +
| editmyuserjs
 +
|*
 +
|-
 +
|editmywatchlist
 +
|editmywatchlist
 +
|*
 +
|-
 +
|viewmyprivateinfo
 +
|viewmyprivateinfo
 +
|*
 +
|-
 +
|viewmywatchlist
 +
|viewmywatchlist
 +
|*
 +
|-
 +
!Technical
 +
|writeapi
 +
|writeapi
 +
|*, user, bot
 +
|}
 +
 
 +
===Registered user===
 +
:Any user with his or her registered account, when he or she is identified, is permitted to use the following functions in the version of the ''Software'' that is used for [[Educaship MediaWiki]].
 +
 
 +
:{|class="wikitable" width=100% style="text-align:center;"
 
|-
 
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!Reading
 +
|read
 +
|When set to false, override for specific pages with WhitelistRead
 +
| *, user
 +
|-
 +
!rowspan="8"|Editing
 
|applychangetags
 
|applychangetags
 
|applychangetags
 
|applychangetags
 
|user
 
|user
−
|-
 
−
|autocreateaccount
 
−
|autocreateaccount - 210--> a more limited version of ''createaccount''
 
−
|—
 
−
|-
 
−
|createaccount
 
−
|createaccount - register / registration
 
−
|*
 
 
|-
 
|-
 
|createpage
 
|createpage
−
|createpage - requires the <tvar|1>''edit''</> right
+
|requires the edit right
 
|*, user
 
|*, user
 
|-
 
|-
 
|createtalk
 
|createtalk
−
|createtalk - requires the <tvar|1>''edit''</> right
+
|requires the edit right
 
|*, user
 
|*, user
 
|-
 
|-
Line 51: Line 109:
 
|*, user
 
|*, user
 
|-
 
|-
 +
|upload
 +
|requires the edit right
 +
|user, sysop
 +
|-
 +
|reupload
 +
|requires the upload right
 +
|user, sysop
 +
|-
 +
|reupload-shared
 +
|(if one is set up) with local files (requires the upload right)
 +
|user, sysop
 +
|-
 +
|sendemail
 +
|sendemail
 +
|user
 +
|-
 +
!rowspan="2"|Management
 +
|changetags
 +
|changetags - currently unused by extensions
 +
|user
 +
|-
 +
|editmyuserjson
 +
|editmyuserjson
 +
|user
 +
|-
 +
!rowspan="3"|Technical
 +
|minoredit
 +
|minoredit
 +
|user
 +
|-
 +
|purge
 +
|purge - URL parameter
 +
|user
 +
|-
 +
|writeapi
 +
|writeapi
 +
|*, user, bot
 +
|}
 +
 +
===Autoconfirmed===
 +
:Any user with his or her registered account, when he or she is identified, (1) confirmed that his or her age confirms requirements established by the ''Software'' and has at least as many edits as established by the ''Software'', is permitted to use the following functions in the version of the ''Software'' that is used for [[Educaship MediaWiki]].
 +
 +
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!Editing
 
|editsemiprotected
 
|editsemiprotected
−
|editsemiprotected - 79--> without cascading protection
+
|editsemiprotected - without cascading protection
 +
|autoconfirmed, sysop
 +
|-
 +
!Technical
 
|autoconfirmed
 
|autoconfirmed
 +
|autoconfirmed - used for the 'autoconfirmed' group, see the other table below for more information
 +
|autoconfirmed, bot, sysop
 +
|}
 +
 +
===Bot===
 +
accounts with the ''bot'' right (intended for automated scripts).
 +
|autoconfirmed, autopatrol, apihighlimits, bot, editsemiprotected, nominornewtalk, suppressredirect, writeapi
 +
 +
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!Administration
 +
|autopatrol
 +
|$wgUseRCPatrol must be ''true''
 +
|bot, sysop
 +
|-
 +
!rowspan="6"|Technical
 +
|apihighlimits
 +
|apihighlimits
 +
|bot, sysop
 +
|-
 +
|autoconfirmed
 +
|used for the 'autoconfirmed' group, see the other table below for more information
 +
|autoconfirmed, bot, sysop
 +
|-
 +
|bot
 +
|bot - can optionally be viewed
 +
|bot
 +
|-
 +
|nominornewtalk
 +
|nominornewtalk - requires ''minor edit'' right
 +
|bot
 +
|-
 +
|suppressredirect
 +
|suppressredirect
 +
|bot, sysop
 
|-
 
|-
 +
|writeapi
 +
|writeapi
 +
|*, user, bot
 +
|}
 +
 +
===Sysop===
 +
users who by default can delete and restore pages, block and unblock users, et cetera.
 +
 +
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!rowspan="12"|Editing
 
|editprotected
 
|editprotected
−
|editprotected - 78--> without cascading protection
+
|editprotected - without cascading protection
 
|sysop
 
|sysop
 +
|-
 +
|editsemiprotected
 +
|editsemiprotected - without cascading protection
 +
|autoconfirmed, sysop
 +
|-
 +
|createaccount
 +
|createaccount - register / registration
 +
|*, sysop
 
|-
 
|-
 
|move
 
|move
−
|move - 68--> requires the <tvar|1>''edit''</> right
+
|requires the edit right
−
|user
+
|sysop
 
|-
 
|-
 
|move-categorypages
 
|move-categorypages
−
|move-categorypages - 209--> (requires the <tvar|1>''move''</> right)
+
|requires the move right
−
|user
+
|sysop
 
|-
 
|-
 
|move-rootuserpages
 
|move-rootuserpages
−
|move-rootuserpages - 71--> requires the <tvar|1>''move''</> right
+
|requires the move right
−
|user
+
|sysop
 
|-
 
|-
 
|move-subpages
 
|move-subpages
−
|move-subpages - 70--> requires the <tvar|1>''move''</> right
+
|requires the move right
−
|user
+
|sysop
 
|-
 
|-
 
|movefile
 
|movefile
−
|movefile - 69--> requires the <tvar|1>''move''</> right and <tvar|AllowImageMoving>{{ll|Manual:$wgAllowImageMoving|$wgAllowImageMoving</> to be true
+
|requires the move right and $wgAllowImageMoving to be true
−
|user
+
|sysop
−
|-
 
−
|reupload
 
−
|reupload - 74--> requires the <tvar|1>''upload''</> right
 
−
|user
 
−
|-
 
−
|reupload-own
 
−
|reupload-own - 75--> requires the <tvar|1>''upload''</> right (note that this is not needed if the group already has the <tvar|reupload>''reupload''</> right)
 
−
|—
 
−
|-
 
−
|reupload-shared
 
−
|reupload-shared - 76--> (if one is set up) with local files 211--> (requires the <tvar|1>''upload''</> right)
 
−
|user
 
−
|-
 
−
|sendemail
 
−
|sendemail
 
−
|user
 
 
|-
 
|-
 
|upload
 
|upload
−
|upload - 73--> requires the <tvar|1>''edit''</> right
+
|upload - requires the edit right
−
|user
+
|user, sysop
 
|-
 
|-
 
|upload_by_url
 
|upload_by_url
−
|upload_by_url - 77--> requires the <tvar|1>''upload''</> right
+
|upload_by_url - requires the upload right
 +
|sysop
 +
|-
 +
|reupload
 +
|reupload - requires the upload right
 +
|user, sysop
 
|-
 
|-
−
|colspan="3" style="text-align:center;"|'''Management'''
+
|reupload-shared
 +
|reupload-shared - (if one is set up) with local files (requires the upload right)
 +
|user, sysop
 
|-
 
|-
 +
!rowspan="17"|Management
 
|bigdelete
 
|bigdelete
 
|bigdelete
 
|bigdelete
Line 109: Line 276:
 
|-
 
|-
 
|block
 
|block
−
|block - 92--> Block options include preventing editing and registering new accounts, and autoblocking other users on the same IP address
+
|Block options include preventing editing and registering new accounts, and autoblocking other users on the same IP address
 
|sysop
 
|sysop
 
|-
 
|-
 
|blockemail
 
|blockemail
−
|blockemail - 93--> allows preventing use of the [[Special:Emailuser]] interface when blocking
+
|allows preventing use of the Emailuser interface when blocking
 
|sysop
 
|sysop
 
|-
 
|-
 
|browsearchive
 
|browsearchive
−
|browsearchive - 89--> through [[Special:Undelete]]
+
|through Special:Undelete
 
|sysop
 
|sysop
−
|-
 
−
|changetags
 
−
|changetags - 104--> currently unused by extensions
 
−
|user
 
 
|-
 
|-
 
|delete
 
|delete
−
|delete '''1.5–1.11:''' 82--> allows the deletion or undeletion of pages.<br />'''1.12+:''' 83--> allows the deletion of pages. 84--> For undeletions, there is now the <tvar|1>'undelete'</> right, see below
+
|allows the deletion or undeletion of pages. For undeletions, there is now the 'undelete' right, see below
 
|sysop
 
|sysop
 
|-
 
|-
Line 135: Line 298:
 
|deletedtext
 
|deletedtext
 
|sysop
 
|sysop
−
|-
 
−
|deletelogentry
 
−
|deletelogentry - 121--> allows deleting/undeleting information (action text, summary, user who made the action) of specific log entries (''not available by default'')
 
−
|—
 
−
|-
 
−
|deleterevision
 
−
|deleterevision - 122--> allows deleting/undeleting information (revision text, edit summary, user who made the edit) of specific revisions 123--> '''Split into deleterevision and deletelogentry in 1.20''' (''not available by default'')
 
−
|—
 
−
|-
 
−
|editcontentmodel
 
−
|editcontentmodel
 
 
|-
 
|-
 
|editinterface
 
|editinterface
−
|editinterface - 106--> contains [[<tvar|man>Special:MyLanguage/Manual:Interface</>|interface messages]]
+
|contains interface messages
−
|sysop, interface-admin
+
|sysop
−
|-
 
−
|editmyoptions
 
−
|editmyoptions
 
−
|*
 
−
|-
 
−
|editmyprivateinfo
 
−
|editmyprivateinfo
 
−
|*
 
−
|-
 
−
|editmyusercss
 
−
|editmyusercss
 
−
|*
 
−
|-
 
−
|editmyuserjs
 
−
| editmyuserjs
 
−
|*
 
−
|-
 
−
|editmyuserjson
 
−
|editmyuserjson
 
−
|user
 
−
|-
 
−
|editmywatchlist
 
−
|editmywatchlist
 
−
|*
 
−
|-
 
−
|editsitecss
 
−
|editsitecss
 
−
|interface-admin
 
−
|-
 
−
|editsitejs
 
−
|editsitejs
 
−
|interface-admin
 
−
|-
 
−
|editsitejson
 
−
|editsitejson
 
−
|interface-admin
 
−
|-
 
−
|editusercss
 
−
|editusercss
 
−
|interface-admin
 
−
|-
 
−
|edituserjs
 
−
|edituserjs
 
−
|interface-admin
 
−
|-
 
−
|edituserjson
 
−
|edituserjson
 
−
|interface-admin
 
−
|-
 
−
|hideuser
 
−
|hideuser - (''not available by default'') Only users with 1000 edits or less can be suppressed by default. 213--> Use <tvar|HideUserContribLimit>{{wg|HideUserContribLimit</> to disable.
 
 
|-
 
|-
 
|markbotedits
 
|markbotedits
−
|markbotedits - 101--> see [[<tvar|man>Special:MyLanguage/Manual:Administrators#Rollback</>|Manual:Administrators#Rollback]]
+
|see Rollback
 
|sysop
 
|sysop
 
|-
 
|-
Line 209: Line 310:
 
|mergehistory
 
|mergehistory
 
|sysop
 
|sysop
−
|-
 
−
|pagelang
 
−
|pagelang - 214--> <tvar|PageLanguageUseDB>{{ll|Manual:$wgPageLanguageUseDB|$wgPageLanguageUseDB</> must be ''true''
 
 
|-
 
|-
 
|patrol
 
|patrol
−
|patrol - 102--> <tvar|UseRCPatrol>{{ll|Manual:$wgUseRCPatrol|$wgUseRCPatrol</> must be ''true''
+
|patrol - $wgUseRCPatrol must be ''true''
 
|sysop
 
|sysop
−
|-
 
−
|patrolmarks
 
−
|patrolmarks
 
 
|-
 
|-
 
|protect
 
|protect
Line 227: Line 322:
 
|rollback
 
|rollback
 
|sysop
 
|sysop
−
|-
 
−
|suppressionlog
 
−
|suppressionlog
 
−
|-
 
−
|suppressrevision
 
−
|suppressrevision - 119--> '''Prior to [[rev:35303|1.13]] this right was named hiderevision''' (''not available by default'')
 
 
|-
 
|-
 
|unblockself
 
|unblockself
−
|unblockself - 96--> Without it, an administrator that has the capability to block cannot unblock themselves if blocked by another administrator
+
|Without it, an administrator that has the capability to block cannot unblock themselves if blocked by another administrator
 
|sysop
 
|sysop
 
|-
 
|-
Line 242: Line 331:
 
|sysop
 
|sysop
 
|-
 
|-
−
|userrights
+
|editsitecss
−
|userrights - 97--> allows the assignment or removal of all* groups to any user.<br /><small>98-->
+
|editsitecss
−
*With <tvar|AddGroups>{{ll|Manual:$wgAddGroups|$wgAddGroups</> and <tvar|RemoveGroups>{{ll|Manual:$wgRemoveGroups|$wgRemoveGroups</> you can set the possibility to add/remove certain groups instead of all</small>
+
|sysop
−
|bureaucrat
 
 
|-
 
|-
−
|userrights-interwiki
+
|editsitejs
−
|userrights-interwiki
+
|editsitejs
−
|-
+
|sysop
−
|viewmyprivateinfo
 
−
|viewmyprivateinfo
 
−
|*
 
−
|-
 
−
|viewmywatchlist
 
−
|viewmywatchlist
 
−
|*
 
−
|-
 
−
|viewsuppressed
 
−
|viewsuppressed - 120--> i.e. a more narrow alternative to "suppressrevision" (''not available by default'')
 
−
|-
 
−
|colspan="3" style="text-align:center;"|'''Administration'''
 
 
|-
 
|-
 +
!rowspan="5"|Administration
 
|autopatrol
 
|autopatrol
−
|autopatrol - 141--> <tvar|UseRCPatrol>{{ll|Manual:$wgUseRCPatrol|$wgUseRCPatrol</> must be ''true''
+
|$wgUseRCPatrol must be ''true''
 
|bot, sysop
 
|bot, sysop
 
|-
 
|-
 
|import
 
|import
−
|import - 126--> “transwiki”
+
|transwiki
 
|sysop
 
|sysop
 
|-
 
|-
 
|importupload
 
|importupload
−
|importupload - 128--> This right was called 'importraw' in and before version 1.5
+
|importupload
 
|sysop
 
|sysop
 
|-
 
|-
 
|managechangetags
 
|managechangetags
−
|managechangetags - 132--> currently unused by extensions
+
|currently unused by extensions
 
|sysop
 
|sysop
 
|-
 
|-
−
|siteadmin
 
−
|siteadmin - 124--> which blocks all interactions with the web site except viewing. 125--> Disabled by default
 
−
|—
 
 
|unwatchedpages
 
|unwatchedpages
−
|unwatchedpages - 131--> lists pages that no user has watchlisted
+
|lists pages that no user has watchlisted
 
|sysop
 
|sysop
 
|-
 
|-
−
|{{hl3 colspan="4"|'''196--> Technical'''
+
!rowspan="5"|Technical
−
|-
 
 
|apihighlimits
 
|apihighlimits
 
|apihighlimits
 
|apihighlimits
Line 293: Line 366:
 
|-
 
|-
 
|autoconfirmed
 
|autoconfirmed
−
|autoconfirmed - 145--> used for the 'autoconfirmed' group, see the other table below for more information
+
|used for the 'autoconfirmed' group, see the other table below for more information
 
|autoconfirmed, bot, sysop
 
|autoconfirmed, bot, sysop
−
|-
 
−
|bot
 
−
|bot - 134--> can optionally be viewed
 
−
|bot
 
 
|-
 
|-
 
|ipblock-exempt
 
|ipblock-exempt
 
|ipblock-exempt
 
|ipblock-exempt
 
|sysop
 
|sysop
−
|-
 
−
|minoredit
 
−
|minoredit
 
−
|user
 
−
|-
 
−
|nominornewtalk
 
−
|nominornewtalk - 137--> requires ''minor edit'' right
 
−
|bot
 
 
|-
 
|-
 
|noratelimit
 
|noratelimit
−
|noratelimit - 138--> not affected by [[<tvar|man>Special:MyLanguage/Manual:$wgRateLimits</>|rate limits]] (''prior to the introduction of this right, the configuration variable <tvar|RateLimitsExcludedGroups>{{ll|Manual:$wgRateLimitsExcludedGroups|$wgRateLimitsExcludedGroups</> was used for this purpose'')
+
|not affected by rate limits
 
|sysop, bureaucrat
 
|sysop, bureaucrat
−
|-
 
−
|purge
 
−
|purge - 135--> [[<tvar|man>Special:MyLanguage/Manual:URL</>|URL parameter]] "<code>&action=purge</code>"
 
−
|user
 
 
|-
 
|-
 
|suppressredirect
 
|suppressredirect
 
|suppressredirect
 
|suppressredirect
 
|bot, sysop
 
|bot, sysop
−
|-
 
−
|writeapi
 
−
|writeapi
 
−
|*, user, bot
 
 
|}
 
|}
  
−
=== List of groups ===
+
===Bureaucrat===
 +
Users who by default can change other users' rights.
  
−
The following groups are available in the version of MediaWiki that is used for [[CNM Wikiware]].
+
:{|class="wikitable" width=100% style="text-align:center;"
 +
|-
 +
|Category
 +
!Right
 +
!Description
 +
!User groups that have this right
 +
|-
 +
!Management
 +
|userrights
 +
|Allows the assignment or removal of all* groups to any user. With $wgAddGroups and $wgRemoveGroups, you can set the possibility to add/remove certain groups instead of all
 +
|bureaucrat
 +
|-
 +
!Administration
 +
|noratelimit
 +
|Not affected by rate limits
 +
|sysop, bureaucrat
 +
|}
  
−
{|class="wikitable"
+
===Legacy functions and roles===
 +
:{|class="wikitable" width=100% style="text-align:center;"
 
|-
 
|-
−
!Group
+
|Category
 +
!Right
 
!Description
 
!Description
−
!Default rights
+
!User groups that have this right
 +
|-
 +
!rowspan="2"|Editing
 +
|autocreateaccount
 +
|a more limited version of ''createaccount''
 
|-
 
|-
−
| *
+
|reupload-own
−
|<translate><!--T:158--> all users (including anonymous).</translate>
+
|requires the upload right (note that this is not needed if the group already has the ''reupload'' right)
−
|createaccount, createpage, createtalk, edit, editmyoptions, editmyprivateinfo, editmyusercss, editmyuserjs, editmywatchlist, read, viewmyprivateinfo, viewmywatchlist, writeapi
 
 
|-
 
|-
−
|user
+
!rowspan="11"|Management'''
−
|<translate><!--T:159--> registered accounts.</translate>
+
|deletelogentry
−
|applychangetags, changetags, createpage, createtalk, edit, minoredit, move, move-categorypages, move-rootuserpages, move-subpages, movefile, purge, read, reupload, reupload-shared, sendemail, upload, writeapi
+
|allows deleting/undeleting information (action text, summary, user who made the action) of specific log entries (''not available by default'')
 +
|-
 +
|editcontentmodel
 +
|editcontentmodel
 +
|-
 +
|editsitejson
 +
|editsitejson
 +
|interface-admin
 +
|-
 +
|edituserjson
 +
|edituserjson
 +
|interface-admin
 +
|-
 +
|hideuser
 +
|(''not available by default'') Only users with 1000 edits or less can be suppressed by default. Use HideUserContribLimit to disable.
 +
|-
 +
|pagelang
 +
|$wgPageLanguageUseDB must be ''true''
 +
|-
 +
|patrolmarks
 +
|patrolmarks
 +
|-
 +
|suppressionlog
 +
|suppressionlog
 
|-
 
|-
−
|autoconfirmed
+
|suppressrevision
−
|<translate><!--T:160--> registered accounts at least as old as <tvar|AutoConfirmAge>{{ll|Manual:$wgAutoConfirmAge|$wgAutoConfirmAge}}</> and having at least as many edits as <tvar|AutoConfirmCount>{{ll|Manual:$wgAutoConfirmCount|$wgAutoConfirmCount}}</>.</translate>
+
|(''not available by default'')
−
|autoconfirmed, editsemiprotected
 
 
|-
 
|-
−
|bot
+
|userrights-interwiki
−
|<translate><!--T:163--> accounts with the ''bot'' right (intended for automated scripts).</translate>
+
|userrights-interwiki
−
|autoconfirmed, autopatrol, apihighlimits, bot, editsemiprotected, nominornewtalk, suppressredirect, writeapi
 
 
|-
 
|-
−
|sysop
+
|viewsuppressed
−
|<translate><!--T:164--> users who by default can delete and restore pages, block and unblock users, et cetera.</translate>
+
|i.e. a more narrow alternative to "suppressrevision" (''not available by default'')
−
|apihighlimits, autoconfirmed, autopatrol, bigdelete, block, blockemail, browsearchive, createaccount, delete, deletedhistory, deletedtext, editinterface, editprotected, editsemiprotected, editusercss, edituserjs, import, importupload, ipblock-exempt, managechangetags, markbotedits, mergehistory, move, move-categorypages, move-rootuserpages, move-subpages, movefile, noratelimit, patrol, protect, proxyunbannable, reupload, reupload-shared, rollback, suppressredirect, unblockself, undelete, unwatchedpages, upload, upload_by_url
 
 
|-
 
|-
−
|bureaucrat
+
!Administration
−
|<translate><!--T:165--> users who by default can change other users' rights.</translate>
+
|siteadmin
−
|noratelimit, userrights
+
|which blocks all interactions with the web site except viewing. Disabled by default
 
|}
 
|}
  
−
== Security ==
+
==Fuctional features==
−
As any [[open-source]] software, the ''Wiki'' is vulnerable to external attacks:
+
===Version control===
−
*https://www.mediawiki.org/wiki/Manual:Security
+
:The ''Software'' includes its own [[version control system]].
−
*https://www.mediawiki.org/wiki/Security_for_developers
+
 
 +
===Security===
 +
:As any [[open-source]] software, the ''Wiki'' is vulnerable to external attacks:
 +
:*https://www.mediawiki.org/wiki/Manual:Security
 +
:*https://www.mediawiki.org/wiki/Security_for_developers
  
 
== Getting started ==
 
== Getting started ==
Line 374: Line 473:
 
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]
 
* [https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]
 
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language]
 
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language]
 +
 +
==See also==
 +
 +
===Related lectures===
 +
:*[[What Wiki Edits Are]].
 +
:*[[Concept Management Quarter]].
 +
 +
[[Category: CNM Cyber Placement]][[Category: Septem Artes Administrativi]][[Category: Articles]]

Latest revision as of 23:32, 14 April 2024

MediaWiki (hereinafter, the Software) is a free and open-source wiki software. The Software was originally developed for Wikipedia, but now the Software runs on many websites and has become the dominant software in its category. The Software is written in the PHP programming language and stores the contents into a set of databases.

The software is optimized to efficiently handle large projects, which can have terabytes of content and hundreds of thousands of hits per second. According to MediaWiki, achieving scalability through multiple layers of caching and database replication has been a major concern for developers. The software has more than 900 configuration settings and more than 1,900 extensions available for enabling various features to be added or changed.

On Wikipedia alone, more than 1000 automated and semi-automated bots and other tools have been developed to assist in editing. It has also been deployed by some companies as an internal knowledge management system, and some educators have assigned students to use the Software for collaborative group projects.


Permitted user roles

System-user roles are specific access and ability permissions that can be assigned to customizable user groups.

Any user

Any user (including anonymous) is permitted to use the following functions in the version of the Software that is used for Educaship MediaWiki.
Category Right Description User groups that have this right
Reading read When set to false, override for specific pages with WhitelistRead *, user
Editing createaccount createaccount - register / registration *, sysop
createpage createpage - requires the edit right *, user
createtalk createtalk - requires the edit right *, user
edit edit *, user
Management editmyoptions editmyoptions *
editmyprivateinfo editmyprivateinfo *
editmyusercss editmyusercss *
editmyuserjs editmyuserjs *
editmywatchlist editmywatchlist *
viewmyprivateinfo viewmyprivateinfo *
viewmywatchlist viewmywatchlist *
Technical writeapi writeapi *, user, bot

Registered user

Any user with his or her registered account, when he or she is identified, is permitted to use the following functions in the version of the Software that is used for Educaship MediaWiki.
Category Right Description User groups that have this right
Reading read When set to false, override for specific pages with WhitelistRead *, user
Editing applychangetags applychangetags user
createpage requires the edit right *, user
createtalk requires the edit right *, user
edit edit *, user
upload requires the edit right user, sysop
reupload requires the upload right user, sysop
reupload-shared (if one is set up) with local files (requires the upload right) user, sysop
sendemail sendemail user
Management changetags changetags - currently unused by extensions user
editmyuserjson editmyuserjson user
Technical minoredit minoredit user
purge purge - URL parameter user
writeapi writeapi *, user, bot

Autoconfirmed

Any user with his or her registered account, when he or she is identified, (1) confirmed that his or her age confirms requirements established by the Software and has at least as many edits as established by the Software, is permitted to use the following functions in the version of the Software that is used for Educaship MediaWiki.
Category Right Description User groups that have this right
Editing editsemiprotected editsemiprotected - without cascading protection autoconfirmed, sysop
Technical autoconfirmed autoconfirmed - used for the 'autoconfirmed' group, see the other table below for more information autoconfirmed, bot, sysop

Bot

accounts with the bot right (intended for automated scripts). |autoconfirmed, autopatrol, apihighlimits, bot, editsemiprotected, nominornewtalk, suppressredirect, writeapi

Category Right Description User groups that have this right
Administration autopatrol $wgUseRCPatrol must be true bot, sysop
Technical apihighlimits apihighlimits bot, sysop
autoconfirmed used for the 'autoconfirmed' group, see the other table below for more information autoconfirmed, bot, sysop
bot bot - can optionally be viewed bot
nominornewtalk nominornewtalk - requires minor edit right bot
suppressredirect suppressredirect bot, sysop
writeapi writeapi *, user, bot

Sysop

users who by default can delete and restore pages, block and unblock users, et cetera.

Category Right Description User groups that have this right
Editing editprotected editprotected - without cascading protection sysop
editsemiprotected editsemiprotected - without cascading protection autoconfirmed, sysop
createaccount createaccount - register / registration *, sysop
move requires the edit right sysop
move-categorypages requires the move right sysop
move-rootuserpages requires the move right sysop
move-subpages requires the move right sysop
movefile requires the move right and $wgAllowImageMoving to be true sysop
upload upload - requires the edit right user, sysop
upload_by_url upload_by_url - requires the upload right sysop
reupload reupload - requires the upload right user, sysop
reupload-shared reupload-shared - (if one is set up) with local files (requires the upload right) user, sysop
Management bigdelete bigdelete sysop
block Block options include preventing editing and registering new accounts, and autoblocking other users on the same IP address sysop
blockemail allows preventing use of the Emailuser interface when blocking sysop
browsearchive through Special:Undelete sysop
delete allows the deletion or undeletion of pages. For undeletions, there is now the 'undelete' right, see below sysop
deletedhistory deletedhistory sysop
deletedtext deletedtext sysop
editinterface contains interface messages sysop
markbotedits see Rollback sysop
mergehistory mergehistory sysop
patrol patrol - $wgUseRCPatrol must be true sysop
protect protect sysop
rollback rollback sysop
unblockself Without it, an administrator that has the capability to block cannot unblock themselves if blocked by another administrator sysop
undelete undelete sysop
editsitecss editsitecss sysop
editsitejs editsitejs sysop
Administration autopatrol $wgUseRCPatrol must be true bot, sysop
import transwiki sysop
importupload importupload sysop
managechangetags currently unused by extensions sysop
unwatchedpages lists pages that no user has watchlisted sysop
Technical apihighlimits apihighlimits bot, sysop
autoconfirmed used for the 'autoconfirmed' group, see the other table below for more information autoconfirmed, bot, sysop
ipblock-exempt ipblock-exempt sysop
noratelimit not affected by rate limits sysop, bureaucrat
suppressredirect suppressredirect bot, sysop

Bureaucrat

Users who by default can change other users' rights.

Category Right Description User groups that have this right
Management userrights Allows the assignment or removal of all* groups to any user. With $wgAddGroups and $wgRemoveGroups, you can set the possibility to add/remove certain groups instead of all bureaucrat
Administration noratelimit Not affected by rate limits sysop, bureaucrat

Legacy functions and roles

Category Right Description User groups that have this right
Editing autocreateaccount a more limited version of createaccount
reupload-own requires the upload right (note that this is not needed if the group already has the reupload right)
Management deletelogentry allows deleting/undeleting information (action text, summary, user who made the action) of specific log entries (not available by default)
editcontentmodel editcontentmodel
editsitejson editsitejson interface-admin
edituserjson edituserjson interface-admin
hideuser (not available by default) Only users with 1000 edits or less can be suppressed by default. Use HideUserContribLimit to disable.
pagelang $wgPageLanguageUseDB must be true
patrolmarks patrolmarks
suppressionlog suppressionlog
suppressrevision (not available by default)
userrights-interwiki userrights-interwiki
viewsuppressed i.e. a more narrow alternative to "suppressrevision" (not available by default)
Administration siteadmin which blocks all interactions with the web site except viewing. Disabled by default

Fuctional features

Version control

The Software includes its own version control system.

Security

As any open-source software, the Wiki is vulnerable to external attacks:

Getting started

See also

Related lectures

Retrieved from "https://pravka.bskol.com/w/index.php?title=MediaWiki&oldid=135369"