Manual:$wgGroupPermissions
From MediaWiki.org
| Access: $wgGroupPermissions | |
|---|---|
| Use this to set access rights for groups and users. |
|
| Introduced in version: | 1.5.0 |
| Removed in version: | still in use |
| Allowed Values: | Complex array of boolean values. |
| Default Value: | See below. |
Other settings: Alphabetical | By Function
Contents |
[edit] Details
$wgGroupPermissions is a two-dimensional array indexed by user group and available permissions; for example, "$wgGroupPermissions['user']['edit'] = true;" allows registered users to edit. These groups can be assigned to users through the wiki Special:Userrights interface.
For in-depth documentation, see Manual:User rights.
 Warning: |
Functionality to make pages inaccessible has not been extensively tested for security. Use at your own risk! |
[edit] Default values
For the more info, visit (see Manual:User rights#Default rights).
Note that this list is incomplete - so far it only goes as far as 1.7.0
Here are the default values. The comments after each item indicate the version of MediaWiki in which the setting was added.
$wgGroupPermissions = array(); // Implicit group for all visitors $wgGroupPermissions['*' ]['createaccount'] = true; // 1.5.0 $wgGroupPermissions['*' ]['read'] = true; // 1.5.0 $wgGroupPermissions['*' ]['edit'] = false; // 1.5.0 $wgGroupPermissions['*' ]['createpage'] = true; // 1.6.0 $wgGroupPermissions['*' ]['createtalk'] = true; // 1.6.0 // Implicit group for all logged-in accounts $wgGroupPermissions['user' ]['move'] = true; // 1.5.0 $wgGroupPermissions['user' ]['read'] = true; // 1.5.0 $wgGroupPermissions['user' ]['edit'] = true; // 1.5.0 $wgGroupPermissions['user' ]['createpage'] = true; // 1.6.0 $wgGroupPermissions['user' ]['createtalk'] = true; // 1.6.0 $wgGroupPermissions['user' ]['upload'] = true; // 1.5.0 $wgGroupPermissions['user' ]['reupload'] = true; // 1.6.0 $wgGroupPermissions['user' ]['reupload-shared'] = true; // 1.6.0 $wgGroupPermissions['user' ]['minoredit'] = true; // 1.6.0 // Implicit group for accounts that pass $wgAutoConfirmAge $wgGroupPermissions['autoconfirmed']['autoconfirmed'] = true; // 1.6.0 // Implicit group for accounts with confirmed email addresses // This has little use when email address confirmation is off $wgGroupPermissions['emailconfirmed']['emailconfirmed'] = true; // 1.7.0 // Users with bot privilege can have their edits hidden // from various log pages by default $wgGroupPermissions['bot' ]['bot'] = true; // 1.5.0 $wgGroupPermissions['bot' ]['autoconfirmed'] = true; // 1.6.0 $wgGroupPermissions['bot' ]['nominornewtalk'] = true; // 1.9.0 // Most extra permission abilities go to this group $wgGroupPermissions['sysop']['block'] = true; // 1.5.0 $wgGroupPermissions['sysop']['createaccount'] = true; // 1.5.0 $wgGroupPermissions['sysop']['delete'] = true; // 1.5.0 $wgGroupPermissions['sysop']['deletedhistory'] = true; // 1.6.0 $wgGroupPermissions['sysop']['editinterface'] = true; // 1.5.0 $wgGroupPermissions['sysop']['import'] = true; // 1.5.0 $wgGroupPermissions['sysop']['importupload'] = true; // 1.5.0 $wgGroupPermissions['sysop']['move'] = true; // 1.5.0 $wgGroupPermissions['sysop']['patrol'] = true; // 1.5.0 $wgGroupPermissions['sysop']['autopatrol'] = true; // 1.9.0 $wgGroupPermissions['sysop']['protect'] = true; // 1.5.0 $wgGroupPermissions['sysop']['proxyunbannable'] = true; // 1.7.0 $wgGroupPermissions['sysop']['rollback'] = true; // 1.5.0 $wgGroupPermissions['sysop']['trackback'] = true; // 1.7.0 $wgGroupPermissions['sysop']['upload'] = true; // 1.5.0 $wgGroupPermissions['sysop']['reupload'] = true; // 1.6.0 $wgGroupPermissions['sysop']['reupload-shared'] = true; // 1.6.0 $wgGroupPermissions['sysop']['unwatchedpages'] = true; // 1.6.0 $wgGroupPermissions['sysop']['autoconfirmed'] = true; // 1.6.0 $wgGroupPermissions['sysop']['upload_by_url'] = true; // 1.8.0 $wgGroupPermissions['sysop']['ipblock-exempt'] = true; // 1.9.0 // Permission to change users' group assignments $wgGroupPermissions['bureaucrat']['userrights'] = true; // 1.5.0 // Experimental permissions, not ready for production use // These were added in 1.6.0, but remain commented out in the source. // $wgGroupPermissions['sysop']['deleterevision'] = true; // 1.6.0 // $wgGroupPermissions['bureaucrat']['hiderevision'] = true; // 1.6.0 // Used by the Special:Renameuser extension // This setting was removed in 1.6.0 as the extension is not part of the default // MediaWiki distribution. $wgGroupPermissions['bureaucrat']['renameuser'] = true; // 1.5.0, removed in 1.6.0 /** * The developer group is deprecated, but can be activated if need be * to use the 'lockdb' and 'unlockdb' special pages. Those require * that a lock file be defined and creatable/removable by the web * server. */ // This setting was added in 1.5.0, but remains commented out in the source. // $wgGroupPermissions['developer']['siteadmin'] = true; // 1.5.0
Note that those with the 'deletedhistory' right can view deleted history entries, but not see or restore the text.
[edit] Use by extensions
Some extensions, such as RenameUser or MakeBot, add new rights which can be configured and assigned in the same manner. cfff
