Access control

This page is to discuss MediaWiki's access control features (not to be confused with "authentication", which is another large area of discussion). This deals with permission management of users who have already been authenticated, in other words, authorization.

Here's a list of resources that deal with MediaWiki access control:

• Bugs filed in Bugzilla - tracked via Bug 2422: Access control (tracking)
  • Bug 767: User and group rights management (tracking for 1.5)
    • Bug 769: ugr: wgOut::sysopRequired() need rewrite
    • Bug 2498: User/Group control on a per document basis
  • Bug 1740: A more advanced control over read access
  • Bug 1809: Access Control List system
  • Bug 1924: Restricted read access for subset of wiki
  • Bug 2227: Expanding $wgWhitelist control of anonymous read/edit
  • Bug 2107: Create a table of priveleges or a privilege capability word or level
• Discussions
  • Wikitech-l - ACL, Access Control List, cur_restrictions - Small thread started March 6, 2005 by Sebastien Barre
  • Wikitech-l - Simple ACL implementation for 1.3.11 - Small thread started March 16, 2005 by MaPhi Werner
  • Wikitech-l - Aggregating MediaWiki access control discussions/patches - Small thread started May 29, 2005 by Rob Lanphier
  • Mediawiki-l - Page access restriction - thread started November 11, 2005 by Gabe Sechan
• meta.wikimedia.org Pages
  • ACL for pages
  • Authentication
  • Help:User levels - From MediaWiki 1.5 documentation
  • Hidden pages
  • Page access restriction with MediaWiki
  • Preventing Access
  • Referees
  • Setting user rights in MediaWiki
  • User table
  • Page by Page Access Restriction Extension
• Wikipedia references
  • Access control
• External links
  • table which compares the MediaWiki 1.5 access control model to other common models
  • Restrict pages under MediaWiki 1.5.x
  • Page-by-page authentication in MediaWiki
• Patches
  • HiddenWiki - patch that allows custom namespaces to be hidden from public view