PeterHarding: 1 revision(s)

2008-02-10T05:46:53Z

1 revision(s)

New page

{{PD Help Page}}
[[Image:SpecialUserrights.png|thumb|300px|The default Special:Userrights interface]]
This page describes user rights assignment and the use of [[Manual:$wgGroupPermissions|$wgGroupPermissions]], [[Manual:$wgAddGroups|$wgAddGroups]], [[Manual:$wgRemoveGroups|$wgRemoveGroups]] and [[Special:Userrights]].

See '''[[Help:User rights]]''' for user rights and user groups in general.

== Default ==
{{MW 1.5|and after}}
The default setting is:
:<source lang="php">$wgGroupPermissions['bureaucrat']['userrights'] = true;</source>
This means that a user in the 'bureaucrat' group can add/remove any group, using [[Special:Userrights]].

== Managing user rights of certain groups ==
This can be set using [[Manual:$wgAddGroups|$wgAddGroups]] and [[Manual:$wgRemoveGroups|$wgRemoveGroups]]. Introduced in 1.11, and behaviour changed in 1.12. For earlier versions you will need to use an extension.

=== 1.11 ===
{{MW 1.11|only}}
Here are some examples, assuming you haven't changed anything yet (so bureaucrat has still his default 'userrights' right).

* '''Example:''' If a group (bureaucrat in this case) can remove any group. Bureaucrat can't add any groups.
<source lang="php">$wgRemoveGroups['bureaucrat'] = true;</source>

* '''Example:''' If a group (bureaucrat in this case) can add only some groups (sysop and bot groups in this case). Bureaucrat can't remove any groups.
<source lang="php">$wgAddGroups['bureaucrat'] = array( 'sysop', 'bot' );</source>

* '''Example:''' You want a sysop to be able to add/remove the bot group, and a bureaucrat be able to add/remove all groups.
Set the following in your [[Manual:LocalSettings.php|LocalSettings.php]] file:
<source lang="php">
$wgAddGroups['sysop'] = array( 'bot' );
$wgRemoveGroups['sysop'] = array( 'bot' );
$wgGroupPermissions['sysop']['userrights'] = true;
</source>
This is for sysops. A bureaucrat has the 'userrights' right by default, so you don't need to set this unless you changed it in your LocalSettings.php.

=== 1.12 ===
{{MW 1.12}}
Here are some examples, assuming you haven't changed anything yet (so bureaucrat has still his default 'userrights' right).

* '''Example:''' If a group (bureaucrat in this case) can remove any right. Bureaucrat can't add any groups.
<source lang="php">
$wgRemoveGroups['bureaucrat'] = true;
$wgGroupPermissions['bureaucrat']['userrights'] = false; # Disable the whole Special:Userrights interface.
</source>

* '''Example:''' If a group (bureaucrat in this case) can add only some groups (sysop and bot groups in this case). Bureaucrat can't remove any group.
<source lang="php">
$wgAddGroups['bureaucrat'] = array( 'sysop', 'bot' );
$wgGroupPermissions['bureaucrat']['userrights'] = false; # Disable the whole Special:Userrights interface.
</source>

* '''Example:''' You want a sysop to be able to add/remove the bot group, and a bureaucrat be able to add/remove all groups.
Set the following in your [[Manual:LocalSettings.php|LocalSettings.php]] file:
<source lang="php">
$wgAddGroups['sysop'] = array( 'bot' );
$wgRemoveGroups['sysop'] = array( 'bot' );
</source>
:This is for sysops. A bureaucrat has the 'userrights' right by default, so you don't need to set this unless you changed it in your LocalSettings.php.

== Managing user rights of users on foreign wikis ==
{{MW 1.12}}
This can be set using the right "userrights-interwiki", for example:
<source lang="php">$wgGroupPermissions['bureaucrat']['userrights-interwiki'] = true;</source>

(More information needed)

== Extensions ==
There are various extensions for user rights management. See [[:Category:User rights extensions]] for a full list of them. Below are alternative ways described using core instead of extensions.

=== [[Extension:GiveRollback|GiveRollback]] ===
Alternative ways for 1.11 and 1.12. Note that the actions are now logged in [[Special:Log/rights]], not in [[Special:Log/gvrollback]].
{{MW 1.11|only}}
* '''Alternative way for the GiveRollback extension, for version 1.11 only.'''
Do not forget to replace <tt>'other groups'</tt> by the groups a bureaucrat should be able to add/remove, e.g. <tt>'sysop'</tt>!
<source lang="php">
$wgAddGroups['bureaucrat'] = array( 'bot', 'other groups' );
$wgRemoveGroups['bureaucrat'] = array( 'bot', 'other groups' );
$wgGroupPermissions['bureaucrat']['userrights'] = true; # They need access to Special:Userrights
$wgGroupPermissions['rollback']['rollback'] = true; # Add the actual group
</source>

{{MW 1.12|only}}
* '''Alternative way for the GiveRollback extension, for version 1.12 only.'''
Do not forget to replace <tt>'other groups'</tt> by the groups a bureaucrat should be able to add/remove, e.g. <tt>'sysop'</tt>!
<source lang="php">
$wgAddGroups['bureaucrat'] = array( 'rollback', 'other groups' );
$wgRemoveGroups['bureaucrat'] = array( 'rollback', 'other groups' );
$wgGroupPermissions['bureaucrat']['userrights'] = false; # Disable the whole Special:Userrights interface
$wgGroupPermissions['rollback']['rollback'] = true; # Add the actual group
</source>

=== [[Extension:MakeBot|MakeBot]] ===
Alternative ways for 1.11 and 1.12. Note that the actions are now logged in [[Special:Log/rights]], not in [[Special:Log/makebot]].
{{MW 1.11|only}}
* '''Alternative way for the MakeBot extension, for version 1.11 only.'''
Do not forget to replace <tt>'other groups'</tt> by the groups a bureaucrat should be able to add/remove, e.g. <tt>'sysop'</tt>!
<source lang="php">
$wgAddGroups['bureaucrat'] = array( 'bot', 'other groups' );
$wgRemoveGroups['bureaucrat'] = array( 'bot', 'other groups' );
$wgGroupPermissions['bureaucrat']['userrights'] = true; # They need access to Special:Userrights
</source>

{{MW 1.12|only}}
* '''Alternative way for the MakeBot extension, for version 1.12 only.'''
Do not forget to replace <tt>'other groups'</tt> by the groups a bureaucrat should be able to add/remove, e.g. <tt>'sysop'</tt>!
<source lang="php">
$wgAddGroups['bureaucrat'] = array( 'bot', 'other groups' );
$wgRemoveGroups['bureaucrat'] = array( 'bot', 'other groups' );
$wgGroupPermissions['bureaucrat']['userrights'] = false; # Disable the whole Special:Userrights interface
</source>

== Wikimedia ==
The [[Special:SiteMatrix|Wikimedia sites]] use a different user rights assignment scheme.

* [[m:Bureaucrat|Bureaucrats]] can't access the whole Special:Userrights anymore, they can add the groups 'bot', 'sysop' and 'bureaucrat', and they can only remove 'bot'. Bureaucrats can access [[Extension:Makesysop|Special:Makesysop]] and [[Extension:MakeBot|Special:Makebot]]. Before 28 December 2007 (see [[bugzilla:11645|bug 11645]]), they could only acess those special pages, and not the part of Special:Userrights.

* [[m:Stewards|Stewards]] can access the whole Special:Userrights on [[m:|Meta-Wiki]] and can remove and add all groups, including extra, optional groups of extensions such as 'checkuser', 'import' etc.

== See also ==
* [[Manual:Preventing access]]
* [[Help:User rights]]

[[Category:Help|User rights]]

Help:User rights management - Revision history

PeterHarding: 1 revision(s)