Page MenuHomePhabricator

Wikimedia should migrate to new user rights assignment scheme
Closed, ResolvedPublic

Description

Wikimedia should use new scheme ($wgAddGroups and $wgRemoveGroups) instead of MakeSysop and MakeBot. It will allow to use more extensible method of managing user rights. Here's an example of possible config for InitialiseSettings.php ( based on http://noc.wikimedia.org/conf/InitialiseSettings.php.html ):

'groupOverrides2' => array(

'default' => array(
    'sysop' => array( 'importupload' => false ),
    // 'rollback' => array( 'rollback' => true, ),
    'import' => array( 'importupload' => true, 'import' => true ),
    'user' => array( 'reupload-shared' => false, 'reupload' => false ),
    'autoconfirmed' => array( 'reupload' => true, 'move' => true ),
    'bureaucrat' => array( 'makesysop' => false, 'userrights' => true ),

    # So that I can rename users with more than 6800 edits -- TS
    'developer' => array( 'siteadmin' => true ),
),

),

'wgAddGroup' => array(

'default' => array(
    'bureaucrat' => array( 'sysop', 'bureaucrat', 'bot' ),
),

),

'wgRemoveGroup' => array(

'default' => array(
    'bureaucrat' => array( 'bot' ),
),

),


Version: unspecified
Severity: enhancement

Details

Reference
bz11645

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:58 PM
bzimport set Reference to bz11645.
bzimport added a subscriber: Unknown Object (MLST).

jeluf wrote:

This can be done when there's a community request needing this.
As this is not the case right now => CLOSED.

bugs wrote:

There *is* a community requesting it; bug 11645.

Also, there are issues relating to stewards (cross-project user-rights changes require the use of the makesysop extension). Of course, this addgroups/removegroups code could easily be merged into the makesysop extension, or the makesysop extension merged into userrights code.

(In reply to comment #5)

Also, there are issues relating to stewards (cross-project user-rights changes
require the use of the makesysop extension). Of course, this
addgroups/removegroups code could easily be merged into the makesysop
extension, or the makesysop extension merged into userrights code.

Yes, I know. Stewards should have (makesysop = true; userrights = true), so they would be able to use Special:Makesysop for crosswiki. Bureaucrats should have (makesysop = false; userrights = true), so they wouldn't be able to use Special:Makesysop and crosswiki, but they would be able to use Special:Userrights

random832 wrote:

Note that enwiki consensus also seems to be rapidly heading towards something that requires this: http://en.wikipedia.org/wiki/Project_talk:Rollback_for_non-administrators_proposal

New version per r28650 :

  1. Uninstall MakeSysop (keep MakeBot for logs)
  2. Add following code to InitialiseSettings.php:

'groupOverrides2' => array(

'default' => array(
    'sysop' => array( 'importupload' => false ),
    // 'rollback' => array( 'rollback' => true, ),
    'import' => array( 'importupload' => true, 'import' => true ),
    'user' => array( 'reupload-shared' => false, 'reupload' => false ),
    'autoconfirmed' => array( 'reupload' => true, 'move' => true ),
    'steward' => array( 'userrights' => true, 'userrights-interwiki' => true ),

    # So that I can rename users with more than 6800 edits -- TS
    'developer' => array( 'siteadmin' => true ),
),

),

'wgAddGroup' => array(

'default' => array(
    'bureaucrat' => array( 'sysop', 'bureaucrat', 'bot' ),
),

),

'wgRemoveGroup' => array(

'default' => array(
    'bureaucrat' => array( 'bot' ),
),

),

Special:Makesysop and Special:Makebot remain, but I've enabled the restricted mode on Special:Userrights for bureaucrats.

The user interface is horrible in this mode, I'd like to see it improved before we force people to use it.

lar wrote:

On Commons, Special:Makesysop just now returned the error page that you get when the wiki is sick. I tried it a few times, checked by doing a null edit to another page that the wiki wasn't sick, and then gave up and used Special:Userrights instead to promote a new admin. Is it supposed to be turned off already? No problem if it is, but that leads to my next question...

I have a question (and I would be glad of a place to ask this, see http://meta.wikimedia.org/wiki/Meta:Babel#Streamlined_user_rights_management ) about the texts. On commons, we added a lot of stuff to Makesysoptext. (see http://commons.wikimedia.org/wiki/MediaWiki:Makesysoptext ) This page stays visible from the very start of the makesysop process to the end. We put a lot of reference material and wiki specific housekeeping info (what lists to add people to, reminder to leave a welcome message, etc) on it. It has language specific subpages of course. What is the corresponding page for userrights? I'd like to, on Commons, make similar modifications to the page that you will see while manipulating userrights. Someone suggested it was MediaWiki:Userrights-groupshelp but my testing suggests that page is not visible from the start to the finish of the userrights manipulation process, it's only visible at one certain point. Thanks for any insight...

rotemliss wrote:

(In reply to comment #10)

On Commons, Special:Makesysop just now returned the error page that you get
when the wiki is sick. I tried it a few times, checked by doing a null edit to
another page that the wiki wasn't sick, and then gave up and used
Special:Userrights instead to promote a new admin. Is it supposed to be turned
off already? No problem if it is, but that leads to my next question...

It seems to be fixed in r29092; the sites just have to be updated.

I have a question (and I would be glad of a place to ask this, see
http://meta.wikimedia.org/wiki/Meta:Babel#Streamlined_user_rights_management )
about the texts. On commons, we added a lot of stuff to Makesysoptext. (see
http://commons.wikimedia.org/wiki/MediaWiki:Makesysoptext ) This page stays
visible from the very start of the makesysop process to the end. We put a lot
of reference material and wiki specific housekeeping info (what lists to add
people to, reminder to leave a welcome message, etc) on it. It has language
specific subpages of course. What is the corresponding page for userrights? I'd
like to, on Commons, make similar modifications to the page that you will see
while manipulating userrights. Someone suggested it was
MediaWiki:Userrights-groupshelp but my testing suggests that page is not
visible from the start to the finish of the userrights manipulation process,
it's only visible at one certain point. Thanks for any insight...

This is MediaWiki:Userrights-summary.

lar wrote:

MediaWiki:Userrights-summary appears to be only the heading because whatever is placed there is displayed in what looks like the H1 font, and no wikimarkup or html tags are honored. [[MediaWiki:Makesysoptext]] honors wikimarkup and html markup. Is there perhaps another page as well as that one? Commons 'crats can see what I mean by comparing http://commons.wikimedia.org/wiki/MediaWiki:Userrights to what is displayed at http://commons.wikimedia.org/wiki/Special:Userrights. (or I can provide screenshots) LMK if this should be a new bug? or discussed elsewhere, I'm not keen on polluting this bug with discussion. I think it's important to be able to customise the interface the same way the makesysop one was.... thanks!

lar wrote:

scratch that last comment, I was not editing the right page. All is fine.