Thread:Project:Support desk/Restrict Namespaces Read/Write Access via LDAP Groups

Hello everybody, I have installed the newest 1.20.2 version of Mediawiki, I have used 1.17 for a long time. I am using an active directory server for user authentification with the Extension:LDAP_Authentication, which is working correctly. We have different departments in our business. Every department is represented in a AD Group which looks like: FSP-A -> Some department FSP-B -> Some other department with IT-knowledge FSP-W -> The main IT department (main wiki editors) I want to have give different permissions to different ldap-groups to different namespaces. (so far its Working perect with Group Restriction). I tried the following setting in LocalSettings.php:
 * Everybody should be able to view but not edit the main namespace.
 * Everybody in the group FSP-W should be able to edit everything.
 * Namespaces should be viewable only by the FSP-W Group.
 * But now I want to give read and/or edit permissions to some namespaces to different AD groups.

$wgGroupPermissions['FSP-W']['ITKnowledge-edit'] = true; $wgGroupPermissions['FSP-B']['ITKnowledge-edit'] = true;

define('NS_ITKnowledge', 1337); $wgExtraNamespaces[NS_ITKnowledge] = 'ITKnowledge'; $wgNamespaceProtection[NS_ITKnowledge] = array( 'ITKnowledge-edit' ); $wgNamespacesWithSubpages[NS_ITKnowledge] = true;

This results in that case, that everybody in the specifieded groups is able to edit articles in the namespace. But everybody could read the articles in the namespace, which is not what I wanted. Is there a way to set more specific rights like:

$wgGroupPermissions['*']['ITKnowledge-read'] = false; $wgGroupPermissions['FSP-W']['ITKnowledge-edit'] = true; $wgGroupPermissions['FSP-B']['ITKnowledge-edit'] = true;

and some different protection type: $wgNamespaceReadProtection[NS_ITKnowledge] = array( 'ITKnowledge-read' ); $wgNamespaceEditProtection[NS_ITKnowledge] = array( 'ITKnowledge-edit' ); I have searched for extensions, but I could get any of them working correctly especially becouse most of them seem to do per page restrictions only. I would be graceful for any advice you can provide.