Manual:$wgNamespaceProtection

This setting allows a wiki to customize default protection levels by namespace. By default, the only restriction applied is the one for sysops assigned with the  permission, which are able to edit the MediaWiki system message namespace.

If you list more than one permission, a user must have all of them to edit pages in that namespace.