532140 - need to restrict edits to registered users

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Rob Campbell [:rc] (:robcee)]

We've been getting some vandalism on the getfirebug.com/wiki. We'd like to restrict edits to logged-in users. I believe this is an option only available through editing config.php. I can provide more details if required.

Comment 1

[John J. Barton]

As a first step we need to reduce the (all) group rights to one item:
Create new user accounts (createaccount)
http://getfirebug.com/wiki/index.php/Special:ListGroupRights

Please add these users from 
http://getfirebug.com/wiki/index.php/Special:ListUsers
to the admins list:
http://getfirebug.com/wiki/index.php/User:Peregrino
http://getfirebug.com/wiki/index.php?title=User:Johnjbarton&action=edit&redlink=1
http://getfirebug.com/wiki/index.php?title=User:Honza&action=edit&redlink=1
http://getfirebug.com/wiki/index.php/User:Rcampbell

Comment 2

[Rob Campbell [:rc] (:robcee)]

I can add users to the admin group if that's really what we want, but in order to make changes to the All group, we need to edit the configuration file.

see:
http://www.mediawiki.org/wiki/Manual:User_rights

Comment 3

[Rob Campbell [:rc] (:robcee)]

another option is to remove the ability for users to register without express approval. We might want to restrict edits to members of the FWG.

Comment 4

[John J. Barton]

Destruction on our wiki continues unabated.

Comment 5

[Rob Campbell [:rc] (:robcee)]

can we get this fixed please? We don't have access to the config.php file and it needs modification. this is generating a bunch of work for us.

Comment 6

[Rob Campbell [:rc] (:robcee)]

specifically, we need this group of changes added to the permissions part of the file:

# Disable for everyone.
$wgGroupPermissions['*']['edit']              = false;
# Disable for users, too: by default 'user' is allowed to edit, even if '*' is not.
$wgGroupPermissions['user']['edit']           = false;
# Make it so users with confirmed e-mail addresses are in the group.
$wgAutopromote['emailconfirmed'] = APCOND_EMAILCONFIRMED;
# Hide group from user list. 
$wgImplicitGroups[] = 'emailconfirmed';
# Finally, set it to true for the desired group.
$wgGroupPermissions['emailconfirmed']['edit'] = true;

Comment 7

[Shyam Mani [:fox2mike]]

These config changes are now live. Please let us know if you need anything else.

Comment 8

[Jan Honza Odvarko [:Honza] (always need-info? me)]

OK, seems to be working, I am not able to make any modifications ;-)
How can I now join the emailconfirmed user group (and keep my current user name)?

Honza

Comment 9

[Rob Campbell [:rc] (:robcee)]

let me do the other thing and add you and the rest to the admin group...

Comment 10

[Rob Campbell [:rc] (:robcee)]

ok updated. We may have to authenticate users manually now. Also, we don't seem to have the email confirmed group visible. If I can't figure out how to add that to the list of visible groups we may need to create another bug.

Thanks Shyam!