Topic on Project:Support desk

Alternative to AccessControl and LockDown Extensions ?

4
62.102.229.98 (talkcontribs)

AccessControl is incompatible with Visual Editor and LockDown is "currently broken in conjunction with MW 1.27+.". Does it exist an alternative ? My client absolutely wants Visual Editor as WYSIWYG editor but we can't loose the page restriction too. What we need is an extension like AccessControl or Lockdown that allow to restrict access to specific pages depending on the user group.

AhmadF.Cheema (talkcontribs)
62.102.229.98 (talkcontribs)

Lockdown actually can't do the same work as AccessControl does. Is there a way to restrict specific page access for a group of users without AccessControl ? For example, I have an article on the home page called "Report". It hasn't a specific namespace. Its URL is simply : "http://mywiki/index.php/Report". Is there a way to say that only user A, B, C, D can edit this page or whatever right I want to set ?

Thanks.

AhmadF.Cheema (talkcontribs)

If you want restricted editing, it is pretty straightforward. It can be done a number of ways, like using Extension:AbuseFilter to create a filter for disallowing user groups or using Extension:AuthorProtect which allows the page author to allow or disallow user groups from editing.

For restricting reading, the situation is completely different as is indicated by the warnings on each of these access control extension pages. If you want you can go through: List of 40+ page specific user rights extensions.

I tried a few of them, but there used to be one problem or another. Following are my observations for the ones I personally tried:

  • Extension:IntraACL
    • The extension had patches according the MediaWiki version that needed to be applied for proper functioning of the extension. The latest patch is for v1.26.3.
    • As I was using MediaWiki v1.28alpha, I couldn't test this.
  • Extension:PermissionACL
    • Apparently, its default position was to restrict all pages and to requires inclusion in code the namespaces or categories which have to be excluded.
    • It is possible that I was mistaken in such an assessment, I didn't give enough time to it.
  • Extension:Restrict access by category and group
    • Not protected from inclusion/transclusion.
    • Hides the page from [[Special:AllPages]], so unless the unauthorized user knows the title of the page, inclusion/transclusion shouldn't be a problem.
    • However, the page is visible from [[Special:RecentChanges]], Wiki search and possibly [[Special:NewPages]] too.
    • On search, page title may appear but the content doesn't show.
    • Diff. and revision links are also protected.
    • Protected from exports, but not any templates (or transcludes) that might be included in the page.
  • Extension:RemoveProtectedContent
    • Removes protected articles from lists (e.g. recentchanges, search results, new articles), and prevents unauthorised users from gaining access to protected content by transcluding it.
    • Patch files were unfortunately for very old MediaWiki versions (v1.15.0 and v1.16.0)
    • Tried patch for ChangesList, but didn't work.

If you are willing to run MediaWiki v1.26.3, I would definitely suggest trying IntraACL. If this doesn't work the most appropriate might only be Lockdown.

Reply to "Alternative to AccessControl and LockDown Extensions ?"