MediaWiki/archive/user-group security

2007-11-19T10:51:35Z

80.190.245.164:

cc4tletoelmo
=={{hide|navbar}}==
[[MediaWiki]]: [[MediaWiki customization|customizing]]: [[MediaWiki user-group security|user-group security]]
==Overview==
Although Mediawiki 1.5 has added the ability to assign users to security groups, it still requires code modification in order to create new groups or change the lists of pages for which those groups have various permissions. Some extensions attempt to fill in the gaps, albeit imperfectly as yet.
==Extensions / Customizations==
The following extensions add access control to MediaWiki:
* [[metawikipedia:Page by page access|Page by page access]]: page-based access control
* [[metawikipedia:GroupWikiBase|GroupWikiBase]]: page-based access control

Of the two, GroupWikiBase seems to come the closest to providing true granular access control, but it also appears to have at least one security hole (searches will return fragments of restricted pages to non-privileged users). There is a patch [[metawikipedia:Talk:GroupWikiBase|here]] which "fixes" the problem with a kind of brute-force approach which restricts results by name space.

The following patch to the '''SpecialSearch.php''' file, however, works with GroupWikiBase to hide search results from any restricted page (changes start at line 324, inside SpecialSearch.showHit()):
===SpecialSearch.php patch===
<php> function showHit( $result, $terms ) {
$fname = 'SpecialSearch::showHit';
wfProfileIn( $fname );
global $wgUser, $wgContLang, $wgLang;

$t = $result->getTitle();
if( is_null( $t ) ) {
wfProfileOut( $fname );
return "\n";
}
// 2007-03-20 Woozle's additional security patch
$restr = $t->getRestrictions($action);
if(!userCanExt($t, &$wgUser, 'read',$canView)) {
return ''; // don't give any info about existence of restricted pages
}
// end of Wzl patch</php>

==implementation notes==
These were notes I made while trying to implement security myself, before the above extensions were available. This may now be useless information. --[[User:Woozle|Woozle]] 14:56, 28 February 2007 (EST)

So far, I've added the following tables:
* '''ugroups''' = [[security groups|groups]] a.k.a. roles
* '''urights''' = permissions, a.k.a. [[security rights|rights]]
* '''user groups''' = which users are in which groups
* '''ugroup rights''' = what rights each group has

I have also populated the [urights] table with values from [[Metawikipedia:Permissions]].

Next steps to take:
* Populate [user groups] with the existing user-group mapping (can be found either in localSettings.php or in the [[Special:Userrights]] area (accessible to wiki sysops only)
* Populate [ugroup rights] with the existing group-rights mapping (I saw this somewhere, but will have to find it again)
* Modify the code so it reads these tables instead of the hard-coded arrays
* We will want to write a Special: page for Group/Rights management (or perhaps just modify Special:Userrights to include this).
* And then there's a little bit of investigation to be done regarding how to protect individual pages. [[Metawikipedia:Page access restriction with MediaWiki|This page]] sounds like it might have this part of the solution.

==Meta articles==
* [[Metawikipedia:Help:User rights|Help:User rights]]: list of permissions currently used in code
* [[Metawikipedia:Hidden pages|Hidden pages]]: "Here are some thoughts on introducing the feature of hidden pages that are only visible and editable by some users."
* [[Metawikipedia:Page access restriction with MediaWiki|Page access restriction with MediaWiki]]: "I made a patch to enable page restriction under the MediaWiki software."
* [[Metawikipedia:Permissions|Permissions]]: seems to be a Special page for displaying Permissions data. Not sure how useful this is.
* Articles which are only vaguely related:
** [[Metawikipedia:MediaWiki FAQ|MediaWiki FAQ]]
** [[Metawikipedia:Write your own MediaWiki extension|Write your own MediaWiki extension]] (this should be in Customization)
** [[Metawikipedia:Category:Mediawiki Extensions|Category:Mediawiki Extensions]] (should probably also be in Customization)

software

2007-11-08T18:37:53Z

80.190.245.164:

eltacelrolvi
[[computing]]: [[software]]{{seedling}}
==Related Articles==
* [[programming]] (a.k.a. software development)
** [[software design]]

==Issues==
* Dangers of ''(should this section be in [[computing]]?)''
** [http://catless.ncl.ac.uk/Risks/ The Risks Digest]: Forum On Risks To The Public In Computers And Related Systems
** [http://courses.cs.vt.edu/~cs3604/lib/Therac_25/Therac_1.html An Investigation of the Therac-25 Accidents] (see also {{wikipedia|Therac-25}})
** [http://wired.com/news/technology/bugs/0,2924,69355,00.html History's Worst Software Bugs]
* [[software design|Design]]
* '''Newish Developments'''
** [http://www.morfik.com/ Morfik]: "web applications unplugged"

==Types==
''types of software''
* '''Applications'''
** Accounting
*** [[GnuCash]]
*** [[Intuit, Inc.]]: [[QuickBooks]], [[Quicken]]
*** [[KMyMoney]]
*** [http://myphpmoney.sourceforge.net/ MyPhpMoney]
** Artificial Intelligence
*** [[Cyc]]
** Audio
*** [http://www.ampache.org/ Ampache]: web-based audio file manager/player
*** [http://www.nanoo.org/moosic/ Moosic]: A musical jukebox program for [[CLI]]-oriented people; also can be used as a [[backend]]
** Credit Card Processing ''(see also Services)''
*** [[PTC]]
** [[data recovery software]]
** '''Database (Clients)'''
*** [[FormTool]]
*** [[Microsoft Access]]
** '''Digital Video Recording'''
*** [http://www.mythtv.org/ MythTV] ([http://www.mythtv.org/wiki/ wiki]): open-source DVR
** '''Email Clients'''
*** [[Eudora]]
*** [[Evolution (email client)|Evolution]]
*** [[kmail]]
*** [[Mozilla Thunderbird]]
*** [http://mutt.org/ Mutt]
** '''Email Storage Management'''
*** [http://www.dbmail.org/ Dbmail]
** '''Feed Readers''' ([[RSS]], [[Atom (format)|Atom]])
*** [[Akregator]]
** '''Financial'''
*** [[KMyMoney]]
** '''Image Editors'''
*** [[GIMP]]
*** [http://www.kanzelsberger.com/pixel/ Pixel]: inexpensive [[proprietary software|proprietary]] cross-[[operating system|platform]] [[Photoshop]]-like image editor
*** '''3D Image Editors''': renderers, modeling, etc.
**** [[wikipedia:Art of Illusion|Art of Illusion]]
**** [[wikipedia:POV-Ray|POV-Ray]]
** '''Internet''' (clients)
*** [[Azureus]]: [[torrent]] [[peer]]
*** [[X-Chat]]: [[IRC]] [[client]]
** '''Personal Data Organizers'''
*** [http://hnb.sourceforge.net/About/ hnb (hierarchical notebook)]
*** [http://bellz.org/treeline/ TreeLine] ([[Linux]], [[Windows (Microsoft)|Windows]])
** '''Printing Utilities'''
*** [[gLabels]]
* '''Database Engines (Servers)'''
** [http://www.firebirdsql.org/ Firebird]
** [[Microsoft SQL Server]]
** [[MySQL]]
** [[PostgreSQL]]
* [[emulators]]
* [[file managers]]
* games
** [http://wiki.soldat.nl Soldat] wiki
* '''[[genealogy]]''' uses a lot of software
* [[operating systems]]
** '''[[Linux]]'''
** [[Windows 98]]
** ''Compatibility Layers: see'' [[Emulators]]
** Components
*** [[Enlightenment]] (aka E)
*** [[KDE]]
*** [[Sane-net]]
** Special-Purpose
*** [http://www.m0n0.ch/wall/ m0n0wall]: network firewall/router on a LiveCD
* [[speech recognition]]
* '''utilities'''
** [[backup software]]
* [[web browsers]]
* [[web software]] (server-side)
** [[content management system]]s
** [[groupware]]
** '''photo-sharing'''
*** [http://gallery.menalto.com/ Gallery]: web-based photo gallery
** '''database admin'''
*** [http://www.phpmyadmin.net/ phpMyAdmin]
** '''financial'''
*** [http://myphpmoney.sourceforge.net/ MyPhpMoney]
** '''social networking'''
*** [http://www.phpizabi.net/ PHPizabi]: [[open-source]], but license is more restrictive than [[GNU GPL]]
** '''[[webcomic]] automation'''
*** [http://cusp.sourceforge.net/man/phpComic.htm phpComic]
*** [http://www.walrusphp.com/ Walrus 3]: site under reconstruction, no downloads available
** '''[[wiki]]'''
*** '''[[MediaWiki]]'''
* [[VoIP]]
** [[Asterisk PBX]]

==Data Formats==
* Media
** [[WavPack]]
** [[RealAudio]]
* Data
** [http://www.yaml.org/ YAML]: "...data serialization format designed for human readability..."
* '''Internet'''
** Services
*** [[IRC]]
==Discussion==
* [http://www.freedesktop.org/wiki/ FreeDesktop Wiki]: discussion of open-source X-Window System Desktops
==Projects==
* [http://freshmeat.net/ FreshMeat]: "the Web's largest index of Unix and cross-platform software, themes and related "eye-candy", and Palm OS software." Mostly open-source.
* [http://sourceforge.net/ SourceForge]: "the world's largest Open Source software development web site"
==To Be Categorized==
* [http://www.phpfreechat.net/ PHP Free Chat] looks to be a non-standard protocol (though "based on [[IRC]]") [[open-source]] chat server ''and'' (web-based) client

HTYP - User contributions [en]

MediaWiki/archive/user-group security

software