Page MenuHomePhabricator

API to create user (disabled by default)
Closed, DeclinedPublic

Description

Author: michael.daly

Description:
In order to help those creating a new wiki with a requirement to preload the login IDs for an existing user set (e.g. within a company so they don't need wiki IDs different than those on existing systems), please provide an API for creating users.

This API should be disabled by default. One should have to explicitly enable this to ensure that they have some notion what they are doing.

A whitelist (mandatory?) should be provided so that IPs (or domain names?) can be specified as the only ones that can execute the API call. That allows the wiki admin to run the API without enabling it for the world (of spammers).

This would be easier for many admins than trying to sort through the various function calls and table updates that may be needed to create a user via a PHP script.


Version: unspecified
Severity: enhancement

Details

Reference
bz17943

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 21 2014, 10:36 PM
bzimport set Reference to bz17943.

Resolving as WONTFIX.

I don't think this belongs in the API, a maintenance script would be more appropriate. I guess adding a --nopromote flag to createAndPromote.php would suffice.

This would be easier for many admins than trying to sort through the various
function calls and table updates that may be needed to create a user via a PHP
script.

When you say that creating users sounds like a very difficult process, which it isn't. It's just a matter of inserting a row into the user table, and the only difficult parts there are calculating the password hash and validating the user name. The latter is documented at the bottom of http://www.mediawiki.org/wiki/User_table