Problem
As mentioned in T252859#6225636, it is currently possible for anyone to modify pages in the Config namespace.
Proposed Solution
Set wgNamespaceProtection for NS_CONFIG on Wikimedia's wikis to the same configuration as NS_MEDIAWIKI.
Description
Description
Details
Details
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Require editinterface to edit NS_CONFIG | operations/mediawiki-config | master | +1 -0 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Tchanders | T256280 Update default tool links | |||
| Resolved | dbarratt | T255504 Decouple Special:Investigate toollinks from Special:CheckUser toollinks | |||
| Declined | Ammarpad | T256278 Restrict editing access of JsonConfig's "Config" namespace on Wikimedia wikis |
Event Timeline
Comment Actions
@Ammarpad are you planning on working on this? I imagine the patch should be pretty simple. Only thought I had was that the NS_CONFIG (constant) might not be defined yet. So we could either conditionally define it (i.e. if it's not already) or just use whatever the integer it maps to in the extension.
Comment Actions
@dbarratt, yes the constant will not be available there. I don't think we need to define it and then use it (which will be only once), we can just use the raw number (as others are already doing so). Alternatively this can also be done inside the extension.json file of JsonConfig, and then let others use wgNamespaceProtection if they want to alter the protection.
Comment Actions
Change 608212 had a related patch set uploaded (by Ammarpad; owner: Ammarpad):
[operations/mediawiki-config@master] Require editinterface to edit NS_CONFIG
https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/ /608212
Comment Actions
@Ammarpad Thanks for the patch. I suspect we won't be using JSONConfig after all, but let's keep this task/patch open until we're sure.
Comment Actions
@Ammarpad thank you for doing the work on this and the patch, I think we're going to use a MediaWiki message which seems slightly better. Apologies for leading everyone astray.
Comment Actions
Change 608212 abandoned by Ammarpad:
Require editinterface to edit NS_CONFIG
Reason:
No longer needed
https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/ /608212