詳細

$wgGroupPermissions を使用すると、利用者グループの権限を設定できます。 $wgRevokePermissionsはいずれかの権限の取り消しを可能にします。 Revoking a right with $wgRevokePermissions takes precedence over granting it with $wgGroupPermissions. If the right is revoked for even one of the user's groups, they will not have it, regardless of whether it's explicitly permitted by other groups.

例

$wgRevokePermissions['sysop']['editinterface'] = true;

結果 (Special:ListGroupRights での表示)

• ユーザーインターフェースを編集 (editinterface)

This acts the same way as $wgGroupPermissions , except that if the user is in a group here, the permission will be removed rather than added. A good use-case for this setting is in conjunction with $wgAutopromote and APCOND_BLOCKED to further restrict the rights of blocked users. Another use-case could be the creation of other "blocked groups" where a sysop can (via $wgAddGroups ) add a user to a group to allow them to edit pages normally, but prevent them from being able to move pages.

警告:	Improperly setting this could mean that your users will be unable to perform certain essential tasks, so use at your own risk!