Page MenuHomePhabricator

Page with <accesscontrol>user</accesscontrol> can be read by members of group bureaucrat but not from group user
Closed, ResolvedPublic

Description

Hi there,

I have two users in my mediawiki: first in a group user and second in a group bureaucrat.

I use code below to protect one of my page:

<accesscontrol>user</accesscontrol>

User from the group bureaucrat can read the page, but user from the group user can`t. I receive Deny user message.
Can you please help with this problem?

Additional information:
MediaWiki 1.34.4
PHP 7.2.34
AccessControl 3.0.1

Event Timeline

Aklapper renamed this task from Problem with user in a group "USER" to Page with <accesscontrol>user</accesscontrol> can be read by members of group bureaucrat but not from group user.Nov 5 2020, 2:28 PM

Side note: You are running an outdated insecure MediaWiki version. Please upgrade for your own safety.

Want changed the task status from Open to Stalled.Nov 5 2020, 7:10 PM
Want subscribed.

Version 2.x in MediaWiki is deprecate. More before year was extension completly reworked. But this using groups is invalid for both versions. AccessControl not use MediaWiki groups, but access lists (normal mediawiki page), wíth list of usernames. If you use only 'user', try find page 'user' in main namespace. If not exist, list is empty.

@Want: Thanks for joining. Hmm, the ticket description says "AccessControl 3.0.1". How is version 2.x related to this problem?

Ah, sorry, I overlooked ticket of version. But it's same. Version 3.0.1 support old syntax too, but it no support user names or mediawiki groups in tag accesscontrol. Only access lists. In czech manual 'skupina uživatelů' is equivalent for access list (page with list of users) and 'seznam uživatelů', defined by parameter 'editAllowedUsers' (or 'readOnlyAllowedUsers') is list of users. Array of users with access to page is generated from raw content of target page with users list.

Tupero claimed this task.

@Want: Thanks for the explanation.