Wikibase/Permissions

Overview
Below you'll find information about the available permissions in Wikibase, and a tidy summary in table form.

Preliminary notes

 * User rights are flags defined either in MediaWiki core's  (link) or in the   property of the   file (e.g., on Wikibase repo)
 * These rights are then assigned to user groups, which can be defined ad hoc in  by setting a boolean value on a permission key to a given group key on  . The default user groups are defined in   (link). Extensions can set their permissions through   (e.g., on Wikibase repo)
 * Grants are collections of user rights granted to third-party software on a user's behalf without giving them full user rights. Grant permissions can be set with the  setting (defaults) or through   (e.g., on Wikibase repo).

Implementation of permissions in Wikibase

 * Permissions on Wikibase are all managed through classes that implement the  interface (link).
 * Mostly, permissions are checked in the  classes themselves. Some permissions are checked on special pages and in API modules.

Key

 * User right: The permission flag being checked
 * Description: The action the permission is checked on
 * Enabled user groups: Which user group this permission is enabled for by default
 * Included in grants: Which grants (collections of permissions for third-party apps) include this permission by default

Wikibase permissions
Read entities (inherited from MediaWiki core) All users Edit entities (inherited from MediaWiki core) All users (and all grants that inherit it in ) Create items (inherited from MediaWiki core) All users Create properties All users Edit terms (labels, descriptions, aliases) on items All users Edit terms on properties All users Merge two items together All users Redirect from one item to another All users