Difference between revisions of "MediaWiki/archive/user-group security"

Revision as of 16:51, 26 October 2010

navbar

MediaWiki: customizing: user-group security

Overview

Although Mediawiki 1.5 has added the ability to assign users to security groups, it still requires code modification in order to create new groups or change the lists of pages for which those groups have various permissions. Some extensions attempt to fill in the gaps, albeit imperfectly as yet.

Extensions / Customizations

The following extensions add access control to MediaWiki:

Page by page access: page-based access control
GroupWikiBase: page-based access control

Of the two, GroupWikiBase seems to come the closest to providing true granular access control, but it also appears to have at least one security hole (searches will return fragments of restricted pages to non-privileged users). There is a patch here which "fixes" the problem with a kind of brute-force approach which restricts results by name space.

The following patch to the SpecialSearch.php file, however, works with GroupWikiBase to hide search results from any restricted page (changes start at line 324, inside SpecialSearch.showHit()):

SpecialSearch.php patch

<php> function showHit( $result, $terms ) { $fname = 'SpecialSearch::showHit'; wfProfileIn( $fname ); global $wgUser, $wgContLang, $wgLang;

$t = $result->getTitle(); if( is_null( $t ) ) { wfProfileOut( $fname ); return "\n"; } // 2007-03-20 Woozle's additional security patch $restr = $t->getRestrictions($action); if(!userCanExt($t, &$wgUser, 'read',$canView)) { return ; // don't give any info about existence of restricted pages } // end of Wzl patch</php>

implementation notes

These were notes I made while trying to implement security myself, before the above extensions were available. This may now be useless information. --Woozle 14:56, 28 February 2007 (EST)

So far, I've added the following tables:

ugroups = groups a.k.a. roles
urights = permissions, a.k.a. rights
user groups = which users are in which groups
ugroup rights = what rights each group has

I have also populated the [urights] table with values from Metawikipedia:Permissions.

Next steps to take:

Populate [user groups] with the existing user-group mapping (can be found either in localSettings.php or in the Special:Userrights area (accessible to wiki sysops only)
Populate [ugroup rights] with the existing group-rights mapping (I saw this somewhere, but will have to find it again)
Modify the code so it reads these tables instead of the hard-coded arrays
We will want to write a Special: page for Group/Rights management (or perhaps just modify Special:Userrights to include this).
And then there's a little bit of investigation to be done regarding how to protect individual pages. This page sounds like it might have this part of the solution.

Meta articles

Help:User rights: list of permissions currently used in code
Hidden pages: "Here are some thoughts on introducing the feature of hidden pages that are only visible and editable by some users."
Page access restriction with MediaWiki: "I made a patch to enable page restriction under the MediaWiki software."
Permissions: seems to be a Special page for displaying Permissions data. Not sure how useful this is.
Articles which are only vaguely related:
- MediaWiki FAQ
- Write your own MediaWiki extension (this should be in Customization)
- Category:Mediawiki Extensions (should probably also be in Customization)

@@ Line 1: / Line 1: @@
-[http://male-extra-reviewed.com/category/penis-enlargement penis enlargement medicine -
+=={{hide|navbar}}==
+[[MediaWiki]]: [[MediaWiki customization|customizing]]: [[MediaWiki user-group security|user-group security]]
+==Overview==
+Although Mediawiki 1.5 has added the ability to assign users to security groups, it still requires code modification in order to create new groups or change the lists of pages for which those groups have various permissions. Some extensions attempt to fill in the gaps, albeit imperfectly as yet.
+==Extensions / Customizations==
+The following extensions add access control to MediaWiki:
+* [[metawikipedia:Page by page access|Page by page access]]: page-based access control
+* [[metawikipedia:GroupWikiBase|GroupWikiBase]]: page-based access control
-More about them soon, but in general, regular exercise is a must if you want the biggest and fastest results efforts.How penis penis pills ingredients [http://ls-league.optibit.ru/index.php?action=profile;u=505  penis enlargement -   act in most of penis pills rush of blood to the penis area, resulting in bigger and harder erections. Your exercises will stretch the penile tissue gradually over time in order to more blood on the microscopic level, the exercises little cracks in the tissue, and these small tears heal overnight. This continuous process allows more length and thickness, you can stop time.Even all if you have a busy life, you should find any problem in adjusting a few minutes of exercise into your day. Men always want more than 7 inches penis, the desire to have a bigger penis, of course, is that your ability to increase sexual activity.
+Of the two, GroupWikiBase seems to come the closest to providing true granular access control, but it also appears to have at least one security hole (searches will return fragments of restricted pages to non-privileged users). There is a patch [[metawikipedia:Talk:GroupWikiBase|here]] which "fixes" the problem with a kind of brute-force approach which restricts results by name space.
-The more the size of your penis, the more able to keep firing and gives you the confidence to conquer more women. Search also the penis techniques? I recommend the natural penis enlargement methods to choose whether they are safe and permanent. pills for penis enlargement One misunderstanding is very common on the penis techniques they will act as if by magic. People expect that, for such night work exercises, you must have patience and keep the consistency for these exercises. As they work, but for one night! Consistency is an important factor that your efforts more you fruitful.I with two tips help, I promise to work if you are consistently and patiently for the outcome does. They are your efforts, your size naturally and permanently gets longer and thicker [http://todayzpatriot.net/smf1/index.php?action=profile;u=6094  penis enlargement capsules -  , which would be your partner a admire.
+The following patch to the '''SpecialSearch.php''' file, however, works with GroupWikiBase to hide search results from any restricted page (changes start at line 324, inside SpecialSearch.showHit()):
+===SpecialSearch.php patch===
+<php>	function showHit( $result, $terms ) {
+		$fname = 'SpecialSearch::showHit';
+		wfProfileIn( $fname );
+		global $wgUser, $wgContLang, $wgLang;
- Pellets are formulated with known aphrodisiacs, which are known for their efficiency. These are aphrodisiacs have been used for centuries to increase overall. Natural pills work to increase blood flow to the penis. It also penis enlargement medicine  increases the production of nitric oxide, together with the promotion of testosterone. Because of their ability to function in various ways, starting penis enlargement pills to grow faster rate.Penis are a better alternative because it is cheaper than most other formulations of expanding the market and take the burden of risky penis pumps, penis enlargement exercises tiring , dangerous and expensive surgery and painful weights. Your penis is not so different from other parts of the body and your desire to enlarge your penis size is normal. However, since penis enlargement is still a taboo in part, in Western society may not have the necessary information you just right. I hope this little article will help you understand the basics of penis enlargement methods and techniques.
+		$t = $result->getTitle();
+		if( is_null( $t ) ) {
+			wfProfileOut( $fname );
+			return "<!-- Broken link in search result -->\n";
+		}
+// 2007-03-20 Woozle's additional security patch
+		$restr = $t->getRestrictions($action);
+		if(!userCanExt($t, &$wgUser, 'read',$canView)) {
+			return '';	// don't give any info about existence of restricted pages
+		}
+// end of Wzl patch</php>
+==implementation notes==
+These were notes I made while trying to implement security myself, before the above extensions were available. This may now be useless information. --[[User:Woozle|Woozle]] 14:56, 28 February 2007 (EST)
-What makes [http://www.platinum.kiev.ua/forum/index.php?action=profile;u=30580  penis enlargement pills -  exercises stand out among the other options I mentioned unnaturally still is the fact that the result of what you will get the results life.A for long, fully erect penis is the guarantee of a good sex life with your partner and the desire of every woman that her partner should be good in bed as they sex.So rarely seen, unless you're the size of your penis size sufficient to satisfy your partner and feel you have a larger size for this purpose, there are many methods available in the market, that is, penis pills, surgeries, etc., but remember, all these methods are unnatural and their negative impact on the human body is more than positive. So after a long tradition of research specialists concluded that the best way to penis enlargement, this natural on the way, is, exercise the safest way to thicken the growth of your penis and is longer.
+So far, I've added the following tables:
+* '''ugroups''' = [[security groups|groups]] a.k.a. roles
+* '''urights''' = permissions, a.k.a. [[security rights|rights]]
+* '''user groups''' = which users are in which groups
+* '''ugroup rights''' = what rights each group has
-http://topnotch.comli.com/index.php?action=profile;u=11662
+I have also populated the [urights] table with values from [[Metawikipedia:Permissions]].
-http://fxforum.sk/index.php?action=profile;u=5747
-http://bucksleague.phillyarena.net/index.php?action=profile;u=36649
-http://mcgilldmd.com/Forum/index.php?action=profile;u=28413
-http://www.outlooktuner.com/community/index.php?action=profile;u=93
-http://baururadiosite.com.br/debates/profile.php?mode=viewprofile&u=5004
-http://blazescape.host22.com/index.php?action=profile;u=725
-http://thaiherbinfo.com/webboard/profile.php?mode=viewprofile&u=50301
-http://www.generoysaludreproductiva.gob.mx/foros/profile.php?id=33076
-http://chovinh.net/forum/member.php?u=1278
-http://forum.french-football.com/profile.php?id=82106
-http://kpopvideo.com/sarang/index.php?s=dbe8b2d01c572ef7f4460d61149307e6&showuser=75946
-http://www.mogonline.com/forums/profile.php?mode=viewprofile&u=104501
-http://www.mpmm-kuis.org/punbb/profile.php?id=2711
-http://www.wijthmen.nl/forum/profile.php?id=55189
-http://www.makemeablogger.com/forum/profile.php?mode=viewprofile&u=37050
-http://www.bannairien.org/chaismf/index.php?action=profile;u=34895
-http://tf.mojbor.net/forum/index.php?action=profile;u=49873
-http://copecontacto.co.cc/foro/index.php?action=profile;u=31411
-http://robiectiv.cristealizari.com/index.php?action=profile;u=5682
-http://notarius-karpov.ru/forum/index.php?action=profile;u=62795
-http://www.virtualproducts.co.za/forum/profile.php?mode=viewprofile&u=45401
-http://testimony.hip-website.com/forums/index.php?action=profile;u=58096
-http://bb.stepfamilyinfo.org/forums/profile.php?mode=viewprofile&u=65223
-http://www.officebangkok.com/forum/index.php?action=profile;u=7815
-http://www.bereadyinc.com/forum/index.php?action=profile;u=77507
-http://umbent.com/forum/index.php?action=profile;u=4836
-http://ieee.nitrkl.ac.in/forum/index.php?action=profile;u=80596
-http://www.tuiskula.com/bb/profile.php?mode=viewprofile&u=138660
-http://4911500744aun7.net84.net/index.php?action=profile;u=2510
+Next steps to take:
+* Populate [user groups] with the existing user-group mapping (can be found either in localSettings.php or in the [[Special:Userrights]] area (accessible to wiki sysops only)
+* Populate [ugroup rights] with the existing group-rights mapping (I saw this somewhere, but will have to find it again)
+* Modify the code so it reads these tables instead of the hard-coded arrays
+* We will want to write a Special: page for Group/Rights management (or perhaps just modify Special:Userrights to include this).
+* And then there's a little bit of investigation to be done regarding how to protect individual pages. [[Metawikipedia:Page access restriction with MediaWiki|This page]] sounds like it might have this part of the solution.
-Some men [http://male-extra-reviewed.com male extra ingredients -  love the rock, because they know that they know the other person feel uncomfortable and throw them out of balance. This puts male extra  them under control. What should a woman do if this list? It is recommended that they recognize this trick and then hung tough and refused to be influenced. Or they can detect the packet in the verbal non-verbal, said: "It is a powerful approach is," I do not get it right now read how you are wondering about what I say, what you think. " a man know that he her. Keep in the eye, known widely for its aphrodisiac properties grenade unique. In fact, supplemented with high-end technologies to process organic food extract even type, freshness and goodness of the pomegranate is guaranteed. Granted, it is to eat really hard and drink, how many hand grenades for a day, but commented on the color booster will tell you how easy it is to supplements is to consume as pomegranate. Painting a male extra enhancer is a dietary supplement known that could actually increase the size of the penis of the man.
+==Meta articles==
+* [[Metawikipedia:Help:User rights|Help:User rights]]: list of permissions currently used in code
+* [[Metawikipedia:Hidden pages|Hidden pages]]: "Here are some thoughts on introducing the feature of hidden pages that are only visible and editable by some users."
+* [[Metawikipedia:Page access restriction with MediaWiki|Page access restriction with MediaWiki]]: "I made a patch to enable page restriction under the MediaWiki software."
+* [[Metawikipedia:Permissions|Permissions]]: seems to be a Special page for displaying Permissions data. Not sure how useful this is.
+* Articles which are only vaguely related:
+** [[Metawikipedia:MediaWiki FAQ|MediaWiki FAQ]]
+** [[Metawikipedia:Write your own MediaWiki extension|Write your own MediaWiki extension]] (this should be in Customization)
+** [[Metawikipedia:Category:Mediawiki Extensions|Category:Mediawiki Extensions]] (should probably also be in Customization)