Extension:UserRightsList

Important security note
A potential injection vulnerability was identified in all versions prior to 0.4. Users of this extension should update!

What can this extension do?
This extension provides an alternative to the standard User rights management special page.
 * Bureaucrats can view users as a list instead of searching for a specific user name
 * Users with account creation privileges can view limited rights for other users they created, if user creation logging is enabled
 * The user list can be filtered by group membership, username (with % wildcards), and/or date ranges for user_registration (by month).

Usage


User rights list will appear as a Restricted special page under Special:Specialpages if the user is logged in and has createaccount privileges. The page will determine whether the logged in user has 'userrights' rights (typically assigned to bureaucrats). If the user has 'userrights', they will see all users and will be able to assign them to all available groups. If the user only has 'createaccount', they will only see users that they have created, and will only be able to assign these to custom groups. In the screenshot, we have created a custom group called 'student'.

Long user lists are divided in pages using the usual paging system from query pages. User lists can also be filtered based on criteria controlled by the form at the top of the page. Filters:
 * By group - select one of the available groups
 * By username - this allows SQL wildcards that work with the LIKE operator. Thus, entering S% will find users whose usernames begin with S.
 * user_registration after - find users whose user_registration is during or after a particular month
 * user_registration before - find users whose user_registration is during or before a particular month

These can be used alone or in combination. For the date filters UserRightsList only displays the years when users have registered in the pulldown menu. The selection is ignored if a month is specified without a year.

Installation
Versions after 0.4 use methods from the Userrights class defined by SpecialUserrights.php. This means it won't work on versions prior to 1.12.

Download and uncompress. Put the UserRightsList directory in your extensions directory

Code
Download from the link in the infobox.

Patches
Previous submitted patches incorporated into version 0.3.