Extension talk:AccessControl/2024

57 previous topics.

Previous discussion was archived at Extension talk:AccessControl/Archive 1 on 24 October 2016.

Special pages and group list

Hi! Thanks for your hard work, I was able to use itto upgrade from mediawiki 1.23 and custom fork to upstream :)

But I had to fix two bugs to make it compatible:

  1. https://github.com/wod-serial/AccessControl/commit/3f7e51a432943bb1f5d95f484fae89a338b88503 - page can start with accesscontrol tag, so we should not check it list is the first thing on the page. Also, list syntax supports "*", not only "* "
  2. Special pages became restricted for users after migration to 1.41. I had to make an ugly fix https://github.com/wod-serial/AccessControl/commit/29bd6821041f8819891c72f88fc2f1f2e0257ae4 - can you check compatibility with 1.41?


I added https://phabricator.wikimedia.org/T364369 and https://phabricator.wikimedia.org/T364370 issues for it. Jehy (talk) 07:25, 7 May 2024 (UTC)

In need of better examples for the "new" way.

I am seeing syntax like this:

{ { AccessControl

| editAllowedUsers = John Doe, Jane Doe

} }

or

{{Warning

| 1 = This page is protected

| editAllowedUsers = John Doe, Jane Doe

}}

In both instances a reference is being made to either template "AccessControl" or "Warning". What are the contents of these templates?

I looked at the original documentation after converting it to English using ChatGPT, but it really doesn't show an example of this template either.

This is what I have tried... and it is not working. I am using mediawiki groups due to users being assigned to one of these group when they login using simplesamlphp and plugableauth extensions. Our organization is TOO BIG, to manage list of groups manually.

<includeonly>

{{AccessControl

| 1 = This page is protected

| isProtectedBy = sysop, bureaucrat, suppress

| editAllowedGroups = bureaucrat

| readOnlyAllowedGroups = suppress

}}

</includeonly>


I created an empty "AccessControl" template since the docs do not show what should go in it. Can someone help?

I have requested access to their sample wiki in the hopes of seeing how they are getting it to work. Hpyjoy (talk) 12:43, 23 May 2024 (UTC)

AccessControl don't work with the Mediwiki groups. Only sysop allowed for all. I created account on my wiki for you and prepared test page but we must logged first for start autoconfirm interval. -- Want (talk) 13:48, 30 May 2024 (UTC)

MediaWiki 1.39: which version of AccessControl?

We're upgrading to MediaWiki version 1.39, but the REL1_39 version of the AccessControl gives 2.6 as version (Special:Version-page and extension.json). REL1_40 gives 6.0. Version 2.6 is completely outdated.

I used: git clone https://gerrit.wikimedia.org/r/mediawiki/extensions/AccessControl

How do I get the right version? Waanders (talk) 15:00, 13 September 2024 (UTC)

restriction on pages based on LDAP Groups.

I'm using the full LDAP stack to authenticate and authorize users with an Active Directory/LDAPS server :

PluggableAuth/LDAPProvider/LDAPAuthentication2/LDAPAuthorization/LDAPGroups

  • authentication works fine for myuser@mydomain
  • restrict connection to group CN=SG_Digital_IT,OU=org,DC=mydomain,DC=com to which belongs myuser@mydomain works fine, using authorization.rules.groups.required list (we use userprincipalname as user attribute)
  • restriction on specific pages to myuser@mydomain works fine But impossible to make it work for LDAP groups. : I have created a local group in LocalSettings.php : $wgGroupPermissions['SG_Digital_IT']['read'] = true; And a mapping in my /usr/share/mediawiki/extensions/LDAPProvider/ldapprovider.json file : "mapping": {        "SG_Digital_IT": "SG_Digital_IT,OU=org,DC=mydomain,DC=com" }

But then in a page, the directive "e‌ditAllowedGroups = SG_Digital_IT" does provide access to the page


When Am I wrong ? 88.122.99.199 (talk) 17:20, 15 November 2024 (UTC)