カテゴリ:ページ固有の利用者権限の拡張機能

From MediaWiki.org
Jump to navigation Jump to search
This page is a translated version of the page Category:Page specific user rights extensions and the translation is 100% complete.

Other languages:
English • ‎dansk • ‎español • ‎français • ‎日本語

The Page specific user rights extensions category contains various extensions that attempt to restrict a user's access to specific pages based on the namespace, category links, and/or title patterns. Before installing one of these extensions, users should be aware that such extensions are likely to exhibit three significant problems:

  • キャッシュ化の問題: MediaWiki's page caching facilities do not currently support rights-specific caching. That means MediaWiki caches one versions of a page and then serves that page to everyone without rechecking to see if the next user has the proper rights. Any extension that tries to exclude or hide part of a page based on user rights is likely to result in performance declines (if caching is turned off) and/or security leaks when a page cached for a user with higher rights is later viewed by a user with lesser rights.
  • 複数の終了経路: Page content has many exit paths in MediaWiki: direct page views, excerpts inserted into search results, special pages, RSS feeds, and numerous extensions that read directly from the MediaWiki database. There is no one exit path that either the MediaWiki core or its extensions rely on. Hence it is virtually impossible for any extension to provide full security.
  • システムのセキュリティ: Content management security is inseparable from overall system security. The default MediaWiki configuration places database passwords in plain text on a file located on the same server as the MediaWiki installation. There is no attempt to secure the host web server or underlying database. If the underlying system is insecure, any extension added on top of that system is also insecure.
拡張機能 状態 Pure extension Works with caching Works with MediaWiki groups ページ ベースのアクセス制御 名前空間ベースのアクセス制御 Add ACL by editing page Add ACL via special page 対応する MediaWiki バージョン
Extension:CrudeProtection archived Yes Yes No (user based) Yes No Yes No ?
Extension:Group Based Access Control archived Yes No Yes Yes No Yes No 1.11.0+
Extension:Access Control List archived No Yes Yes Yes Yes Yes Yes 1.13.2, 1.15.1 - 1.15.3, 1.16.0 or 1.17.2
IntraACL maintained No Yes Yes No Yes Yes Yes Tested 1.18-1.26, newer may work
Extension:Lockdown unmaintained Yes Yes Yes No Yes No No 1.13
Extension:NSFileRepo stable Yes Yes Yes No Yes No No 1.9-1.11, 1.13, 1.14, 1.15(w/patches), 1.16Beta2
Extension:Page access restriction archived No No Yes Yes Yes No Yes 1.4-1.7.1, 1.10
Extension:PageProtectionPlus unmaintained Yes No Yes Yes (really section based) No Yes No 1.8,1.9.1
Extension:PageSecurity archived No No Yes Yes No Yes No 1.8,1.9
Extension:PrivatePageProtection unmaintained Yes Yes Yes Yes No Yes No 1.18
Extension:Simple Security unstable Yes No Yes Yes Yes Yes No 1.6+
Extension:WhiteList unstable Yes Yes No (user based) Yes No No Yes 1.6.0+
拡張機能 状態 Pure extension Works with caching Works with MediaWiki groups ページ ベースのアクセス制御 名前空間ベースのアクセス制御 Add ACL by editing page Add ACL via special page 対応する MediaWiki バージョン
拡張機能 Handles transclusion Handles preview Handles raw Handles search Handles export Handles rss/atom Handles recent changes Re-use LDAP groups
Extension:CrudeProtection No No No No No No No ?
Extension:Group Based Access Control No ? ? ? ? ? ? ?
Extension:Access Control List Yes Yes Yes Yes (w/ patch) Yes No Yes Yes (with LDAP extension)
IntraACL Yes Yes Yes Yes (w/ patch) Yes Yes (w/ patch) Yes Yes (with LDAP extension)
Extension:Lockdown $wgNonincludableNamespaces $wgNonincludableNamespaces yes partial (title listed, but no content) yes partial (title listed, but no content) partial (title listed, but no content) ?
Extension:NSFileRepo $wgNonincludableNamespaces $wgNonincludableNamespaces yes partial (title listed, but no content) yes partial (title listed, but no content) partial (title listed, but no content) ?
Extension:Page access restriction ? ? ? Yes Yes ? ? ?
Extension:PageProtectionPlus ? ? ? ? ? ? ? ?
Extension:PageSecurity Yes Yes Yes Yes Yes No ? ?
Extension:PrivatePageProtection $wgNonincludableNamespaces $wgNonincludableNamespaces yes partial (title listed, but no content) yes partial (title listed, but no content) partial (title listed, but no content) ?
Extension:Simple Security Yes (must enable db-hook) ? ? No ? ? No ?
Extension:WhiteList No Yes Yes Yes (1.10+ hides article excerpts) Yes (1.10+) Yes (1.12+) No? ?
拡張機能 Handles transclusion Handles preview Handles raw Handles search Handles export Handles rss/atom Handles recent changes Re-use LDAP groups

関連項目

外部リンク

Pages in category "カテゴリ:ページ固有の利用者権限の拡張機能"

The following 4 pages are in this category, out of 4 total.