Background
Currently, if a performer-target pair doesn't meet conditions for a given group, the relevant checkbox on Special:UserRights is going to be disabled.
This works fine if conditions are based on publicly-accessible data, such as account age, number of edits etc. However, some conditions, such as whether the user has 2FA configured are deemed 'private' and therefore their status should not be proactively advertised.
Acceptance criteria
- Implement a mechanism that defines certain $wgRestrictedGroups conditions as private.
- Checkboxes on Special:UserRights for groups using private conditions should be enabled, regardless of whether the conditions are met or not.
- Trying to assign a user, which doesn't meet conditions, to a group using private condition should fail with an error message explaining what happened.
-
Extensions should be able to react to the above-mentioned failures.(extracted to T415491)