User rights are permissions (such as the ability to edit pages or to block users) that can be assigned to different user groups. MediaWiki ships with a default set of user rights and user groups, but these can be customized. This page explains the default rights and groups, and how to customize them.

A default MediaWiki installation assigns certain rights to default groups (see table at #List of permissions). You can change the default rights by editing the $wgGroupPermissions array in LocalSettings.php with the following syntax:

$wgGroupPermissions['group']['right'] = true /* or false */;

If a member has multiple groups, they get all the permissions from each of the groups they are in. All users, including anonymous users, are in the '*' group; all registered users are in the 'user' group. In addition to the default groups, you can arbitrarily create new groups using the same array.

$wgGroupPermissions['*']['read'] = false;
# The following line is not actually necessary, since it's in the defaults. Setting '*' to false doesn't disable rights for groups that have the right separately set to true!
$wgGroupPermissions['user']['read'] = true;

# Disable for everyone.
$wgGroupPermissions['*']['edit'] = false;
# Disable for users, too: by default 'user' is allowed to edit, even if '*' is not.
$wgGroupPermissions['user']['edit'] = false;

# Make it so users with confirmed email addresses are in the group.
$wgAutopromote['emailconfirmed'] = APCOND_EMAILCONFIRMED;
# Hide group from user list.
$wgImplicitGroups[] = 'emailconfirmed';
# Finally, set it to true for the desired group.
$wgGroupPermissions['emailconfirmed']['edit'] = true;

Custom groups can be created. A group is created implicitly, by just assigning it rights in $wgGroupPermissions[ 'group-name' ] where group-name is the actual name of the group. From MW 1.12, you can create your own groups into which users are automatically promoted (as with autoconfirmed) using $wgAutopromote .

• MediaWiki:Group-<group-name> (content: Name of the group)
• MediaWiki:Group-<group-name>-member (content: Name of a member of the group)
• MediaWiki:Grouppage-<group-name> (content: Name of the group page)

By default, bureaucrats can add users to, or remove them from, any group. However, if you are using $wgAddGroups and $wgRemoveGroups , you may need to customize those instead.

$wgGroupPermissions['projectmember']['bot'] = true;
$wgGroupPermissions['projectmember']['block'] = true;
$wgGroupPermissions['projectmember']['delete'] = true;

$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['*']['createpage'] = false;
$wgGroupPermissions['user']['edit'] = false;
$wgGroupPermissions['user']['createpage'] = false;
$wgGroupPermissions['writer']['edit'] = true;
$wgGroupPermissions['writer']['createpage'] = true;

The following user rights are available in the latest version of MediaWiki. If you are using an older version, look at Special:Version on your wiki and see if your version is covered in the "Versions" column.

پێڕستی گرۆکان

The following groups are available in the latest version of MediaWiki. If you are using an older version then some of these may not be implemented.

MediaWiki out of the box comes with a number of predefined groups. Most of these groups can be removed by unsetting the according array keys, among them $wgGroupPermissions[ '<group-name>' ]. بۆ وردەکاری بنۆڕە خوارەوە.

This example will eliminate the bureaucrat group entirely. It is necessary to ensure that all six of these variables are unset for any group that one wishes to remove from being listed at Special:ListGroupRights; however, merely unsetting $wgGroupPermissions will suffice to remove it from Special:UserRights.

unset( $wgGroupPermissions['bureaucrat'] );
unset( $wgRevokePermissions['bureaucrat'] );
unset( $wgAddGroups['bureaucrat'] );
unset( $wgRemoveGroups['bureaucrat'] );
unset( $wgGroupsAddToSelf['bureaucrat'] );
unset( $wgGroupsRemoveFromSelf['bureaucrat'] );

This code will not work if any extension that modifies the default rights for the bureaucrat group, such as Extension:AntiSpoof , is installed.

More broadly, to disable a user group created by an extension, the above code needs to run after all extensions have been registered.

$wgExtensionFunctions[] = function() use ( &$wgGroupPermissions ) {
    unset( $wgGroupPermissions['oversight'] );
    unset( $wgGroupPermissions['flow-bot'] );
};

 تێبینی:

مافە بنەڕەتییەکان

https://phabricator.wikimedia.org/diffusion/MW/browse/master/includes/MainConfigSchema.php

https://phabricator.wikimedia.org/diffusion/MW/browse/REL1_44/includes/MainConfigSchema.php

Information for coders only follows.

If you're adding a new right in core, for instance to control a new special page, you are required to add it to the list of available rights in PermissionManager.php , $coreRights (example). If you're doing so in an extension , you instead need to use $wgAvailableRights .

// create projectmember-powers right
$wgAvailableRights[] = 'projectmember-powers';

// add projectmember-powers to the projectmember-group
$wgGroupPermissions['projectmember']['projectmember-powers'] = true;

// add projectmember-powers to the 'basic' grant so we can use our projectmember powers over an API request
$wgGrantPermissions['basic']['projectmember-powers'] = true;

You also need to add right-[name] and action-[name] interface messages to /languages/i18n/en.json (with documentation in qqq.json). The right-* messages can be seen on Special:ListGroupRights and the action-* messages are used in a sentence like "You do not have permission to ...".

• Special:ListGroupRights – Links to this help page and might contain not yet documented rights
• Help:User rights and groups – Help page describing use of the Special:Userrights interface (for bureaucrats)
• Manual:Setting user groups in MediaWiki – Information about managing and the assignment of user groups.
• Manual:$wgNamespaceProtection
• Manual:$wgAutopromote
• Manual:$wgAddGroups , Manual:$wgRemoveGroups
• Manual:Preventing access – Examples
• Manual:Establishing a hierarchy of bureaucrats
• Category:User rights extensions – Many extensions relating to user rights