Manual:User rights/ko
From MediaWiki.org
[edit] 그룹 관리
미디어위키 설치를 설치하게되면 디폴트 그룹에 대한 특정 권한이 부여된다.(아래를 보시오) 사용자는 LocalSettings.php에 $wgGroupPermissions array에 "$wgGroupPermissions[‘group’][‘right’] = boolean;"의 형식으로 선언하므로써 디폴트 권한을 변경시킬 수 있다.
모든 그룹의 허가를 변경시키려면 "*"를 그룹으로 사용하면된다. 예를 들어서 모든 사용자들의 편집 기능을 불가능하게 하려면 "$wgGroupPermissions['*']['edit'] = false;"을 추가하면 된다.
디폴트 그룹에 추가적으로 같은 배열을 사용하므로써 새로운 그룹을 임의적으로 추가할 수 있다. 예를 들면:
$wgGroupPermissions['ninja']['bot'] = true; $wgGroupPermissions['ninja']['block'] = true; $wgGroupPermissions['ninja']['delete'] = true;
[edit] Rights and groups
The following user rights are available:
| Right | Description |
|---|---|
| Reading | |
| read | allows viewing pages not defined in $wgWhitelistRead. |
| Editing | |
| edit | allows editing unprotected pages. |
| createpage | allows the creation of new pages (requires the edit right). |
| createtalk | allows the creation of new talk pages (requires the edit right). |
| move | allows renaming page titles. |
| createaccount | allows the creation of new user accounts. |
| upload | allows the creation of new images and files. |
| reupload | allows overwriting existing images and files. |
| reupload-shared | allows replacing images and files from a shared repository (if one is set up) with local files. |
| upload_by_url | allows uploading by entering the URL of an external image. |
| Management | |
| delete | allows the deletion of edits and pages. |
| undelete | allows viewing and restoring deleted edits and pages. |
| deletedhistory | allows viewing deleted revisions, but not restoring. |
| protect | allows locking a page to prevent edits, and editing locked pages. |
| block | allows the blocking of IP addresses, CIDR ranges, and registered users. Block options include preventing editing and registering new accounts, and autoblocking other users on the same IP address. |
| blockemail | allows preventing use of the Special:Emailuser interface when blocking. |
| userrights | allows the use of the user rights interface, which allows the assignment or removal of groups to any user. |
| rollback | allows one-click reversion of edits. |
| patrol | allows marking edits as legitimate ($wgUseRCPatrol must be true). |
| editinterface | allows editing the MediaWiki namespace, which contains interface messages. |
| Administration | |
| siteadmin | allows locking and unlocking the database (which blocks all interactions with the web site except viewing). |
| import | allows user to import pages from another wiki. |
| importupload | allows user to import pages from XML files. |
| trackback | allows removal of trackbacks (if $wgUseTrackbacks is true). |
| unwatchedpages | allows access to Special:Unwatchedpages, which lists pages that no user has watchlisted. |
| Technical | |
| bot | hides edits from recent changes lists and watchlists by default (can optionally be viewed). |
| purge | allows purging a page without a confirmation step (URL parameter "&action=purge"). |
| minoredit | allows marking an edit as 'minor'. |
| nominornewtalk | blocks new message notification when making minor edits to user talk pages (requires minor edit right). |
| ipblock-exempt | makes user immune to blocks applied to his IP address. |
| proxyunbannable | makes user immune to the open proxy blocker, which is disabled by default ($wgBlockOpenProxies). |
| autopatrol | automatically marks all edits by the user as patrolled ($wgUseRCPatrol must be true). |
The following groups are available:
| Group | Description |
|---|---|
| * | all users (including anonymous). |
| user | registered accounts. |
| autoconfirmed | registered accounts at least as old as $wgAutoConfirmAge and having at least as many edits as $wgAutoConfirmCount. |
| emailconfirmed | registered accounts with confirmed email addresses. |
| bot | accounts with the bot right (intended for automated scripts). |
| sysop | users who by default can delete and restore pages, block and unblock users, et cetera. |
| bureaucrat | users who by default can change other users' rights. |
[edit] Default rights
The default rights are defined in DefaultSettings.php. MediaWiki 1.11alpha defines the following:
/** * Permission keys given to users in each group. * All users are implicitly in the '*' group including anonymous visitors; * logged-in users are all implicitly in the 'user' group. These will be * combined with the permissions of all groups that a given user is listed * in in the user_groups table. * * Functionality to make pages inaccessible has not been extensively tested * for security. Use at your own risk! * * This replaces wgWhitelistAccount and wgWhitelistEdit */ $wgGroupPermissions = array(); // Implicit group for all visitors $wgGroupPermissions['*' ]['createaccount'] = true; $wgGroupPermissions['*' ]['read'] = true; $wgGroupPermissions['*' ]['edit'] = true; $wgGroupPermissions['*' ]['createpage'] = true; $wgGroupPermissions['*' ]['createtalk'] = true; // Implicit group for all logged-in accounts $wgGroupPermissions['user' ]['move'] = true; $wgGroupPermissions['user' ]['read'] = true; $wgGroupPermissions['user' ]['edit'] = true; $wgGroupPermissions['user' ]['createpage'] = true; $wgGroupPermissions['user' ]['createtalk'] = true; $wgGroupPermissions['user' ]['upload'] = true; $wgGroupPermissions['user' ]['reupload'] = true; $wgGroupPermissions['user' ]['reupload-shared'] = true; $wgGroupPermissions['user' ]['minoredit'] = true; $wgGroupPermissions['user' ]['purge'] = true; // can use ?action=purge without clicking "ok" // Implicit group for accounts that pass $wgAutoConfirmAge $wgGroupPermissions['autoconfirmed']['autoconfirmed'] = true; // Implicit group for accounts with confirmed email addresses // This has little use when email address confirmation is off $wgGroupPermissions['emailconfirmed']['emailconfirmed'] = true; // Users with bot privilege can have their edits hidden // from various log pages by default $wgGroupPermissions['bot' ]['bot'] = true; $wgGroupPermissions['bot' ]['autoconfirmed'] = true; $wgGroupPermissions['bot' ]['nominornewtalk'] = true; $wgGroupPermissions['bot' ]['autopatrol'] = true; // Most extra permission abilities go to this group $wgGroupPermissions['sysop']['block'] = true; $wgGroupPermissions['sysop']['createaccount'] = true; $wgGroupPermissions['sysop']['delete'] = true; $wgGroupPermissions['sysop']['deletedhistory'] = true; // can view deleted history entries, but not see or restore the text $wgGroupPermissions['sysop']['editinterface'] = true; $wgGroupPermissions['sysop']['import'] = true; $wgGroupPermissions['sysop']['importupload'] = true; $wgGroupPermissions['sysop']['move'] = true; $wgGroupPermissions['sysop']['patrol'] = true; $wgGroupPermissions['sysop']['autopatrol'] = true; $wgGroupPermissions['sysop']['protect'] = true; $wgGroupPermissions['sysop']['proxyunbannable'] = true; $wgGroupPermissions['sysop']['rollback'] = true; $wgGroupPermissions['sysop']['trackback'] = true; $wgGroupPermissions['sysop']['upload'] = true; $wgGroupPermissions['sysop']['reupload'] = true; $wgGroupPermissions['sysop']['reupload-shared'] = true; $wgGroupPermissions['sysop']['unwatchedpages'] = true; $wgGroupPermissions['sysop']['autoconfirmed'] = true; $wgGroupPermissions['sysop']['upload_by_url'] = true; $wgGroupPermissions['sysop']['ipblock-exempt'] = true; $wgGroupPermissions['sysop']['blockemail'] = true; // Permission to change users' group assignments $wgGroupPermissions['bureaucrat']['userrights'] = true; // Experimental permissions, not ready for production use //$wgGroupPermissions['sysop']['deleterevision'] = true; //$wgGroupPermissions['bureaucrat']['hiderevision'] = true; /** * The developer group is deprecated, but can be activated if need be * to use the 'lockdb' and 'unlockdb' special pages. Those require * that a lock file be defined and creatable/removable by the web * server. */ # $wgGroupPermissions['developer']['siteadmin'] = true;
