Topic on Project:Support desk

Editing my original message to include new stuff.
I looked at several Manual: pages including the articles on:

• $wgGroupsAddToSelf
• $wgGroupsRemoveFromSelf
• $wgAddGroups
• $wgRemoveGroups

MediaWiki version: 1.24.1
PHP Version: 5.5.21 (cgi-fcgi)
SQLite Version: 3.7.9 with full-text search support

I have a site set up that I'm using to test MediaWiki.
I have the newest stable version of MediaWiki set up, using a mysql database. (I think it's my sql. whatever the local one is where it doesn't do a host, all you need is db name and write access.)

It took me a while today to figure out how to use Lockdown and I got that working (wanted it so that sysop's couldn't read a certain namespace; there are other administrative groups that work exclusively in this namespace.)

I have the following code in my LocalSettings.php file, and I'm trying to make it so that the default bureaucrat group can only add people to the default groups, and not remove anyone from bureaucrat.
I don't want bureaucrat's to be able to add to this other group of 'exclusive administrators', which will be handled by another exclusive group, or stewards.

unset( $wgGroupsAddToSelf['bureaucrat'] );
unset( $wgGroupsRemoveFromSelf['bureaucrat'] );
unset( $wgAddGroups['bureaucrat'] );
unset( $wgRemoveGroups['bureaucrat'] );
$wgGroupsAddToSelf['bureaucrat'] = array( 'bot', 'administrator', 'bureaucrat', 'oversight', 'oversightadmin', 'developer', 'interfaceeditor' );
$wgGroupsRemoveFromSelf['bureaucrat'] = true;
$wgAddGroups['bureaucrat'] = array( 'bot', 'administrator', 'bureaucrat', 'oversight', 'oversightadmin', 'developer', 'interfaceeditor' );
$wgRemoveGroups['bureaucrat'] = array( 'bot', 'administrator', 'oversight', 'oversightadmin', 'developer', 'interfaceeditor' );

Edit: Feel free to reply, or link to the reply, on my non-existant talk page. Please create it :3
Edit 2: If needed, I can copy paste my entire LocalSettings.php file.

Okay, you explained what do you want to do and what have you done so far. But what problem have you encountered?

$wgGroupsRemoveFromSelf doesn't follow the usage described on the manual.

I want bureaucrats to be able to add themselves in some groups.
According to the GroupsRemoveFromSelf#Changes in 1.14 article, it says I'm using that config properly to make it so bureaucrats to remove themselves from any groups. This is what I want.

In the line above that, I want bureaucrats to only be able to add themselves to the groups 'bot' 'administrator' 'bureaucrat' 'oversight' 'oversightadmin' 'developer' and 'interfaceeditor'

On my Special:UserRights page, users in bureaucrat can still add themselves to any group.
Should 'administrator' be replaced with 'sysop' ? If so, any chance this is causing an issue for the entire line? Or is there something wrong with my 'unset' commands? I saw those somewhere, and they're close to the end of my LocalSettings.php file..

> I want bureaucrats to be able to add themselves in some groups.

This is possible with the default configuration. Is that not working? It should work.

One note also because you mentioned the Lockdown extension: Note that MediaWiki is not made for access control! There will most likely alway be a way around whatever retriction you have set up. If you need per-page or per-usergroup permissions, then you should not use MediaWiki. Use a CMS instead!

I don't need my site totally secure, I understand content posted on my site will be accessible by anyone who actually tries hard enough.
I just don't want some areas easily accessible.
The "adding themselves in some groups" isn't working.
Even though I have the following code near the end of my LocalSettings.php file, bureaucrats can still add themselves to ALL groups (including those not listed in the array).
$wgGroupsAddToSelf['bureaucrat'] = array( 'bot', 'administrator', 'bureaucrat', 'oversight', 'oversightadmin', 'developer', 'interfaceeditor' );

I don't know what I did wrong the first time, but I reinstalled XAMPP and MediaWiki, set up the permissions again, and now it works. Stewards now have CheckUser (which is also a seperate group), Oversight, bureaucrat, and sysop perms.
And my Bureaucrats can only add themselves to groups I list. Yay!
Don't know what I did wrong, but thanks for trying to help me, @Ciencia Al Poder: and anon. NDKilla (talk) 19:47, 1 March 2015 (UTC)