MediaWiki security >

One of the reasons I went with MediaWiki was the promise of access control groups. However, it has proved to be a serious letdown. Such functionality does not and will not ever exist. Sad.

So in order to get this functionality, various sorts of hacks are needed. I have not yet experimented with any and so I won’t talk about them. Some “official ways” were supposedly implemented, but I can’t seem to get them to work..

• MediaWiki group permissions by namespace

Resources / Notes ∞

Dated or broken ∞

• Andrew Johnson’s account creation privilege hack

  • 2008-05-12 — 2005-08

• Joshua Yeidel’s permissions hack

  • 2008-05-12 — 2005-08, (1.4.7)

• Usercan Hook

  • 2008-05-12 — Fails completely, with 1.11.1

• AccessControl extension

  • 2008-05-12 — Updated 2008-02, but still seems horribly broken.

Unchecked ∞

• https://meta.wikimedia.org/wiki/Permissions
• https://meta.wikimedia.org/wiki/Page_access_restriction_with_MediaWiki
• https://www.mediawiki.org/wiki/Manual:User_rights

• https://meta.wikimedia.org/wiki/Setting_user_rights_in_MediaWiki

• hiddenwiki

  • A patch against MediaWiki to apply all kinds of hacking to support hidden pages.
  • It was created as a response to Bug 1924: Restricted read access for subset of wiki ^[ 1 ] was http://bugzilla.wikimedia.org/show_bug.cgi?id=1924