There's no way to make such a group.

As Brion said over IRC, userrights are additive, so this is not doable with the
current rights system.

robchur wrote:

That doesn't make it a WONTFIX.

robchur wrote:

I can think of a couple of methods for doing this, one a quick hack, and one a bit cleaner.

The hack would be to add a second permission check in UploadForm::execute(), something like:

if( $wgUser->isAllowed( 'noupload' ) )

aborting the process if that's true. We would then avoid assigning that permission in the defaults, and document the abnormal behaviour. However, this creates, well, abnormal behaviour which isn't consistent with the rest of our permissions mechanism.

The second method would be to introduce another block flag to prevent image uploads. This is much cleaner, but requires a schema change and takes a bit longer to implement.

A block flag probably makes the most sense in general.... However if we keep adding little block flags like this, issues of expiration are raised -- a 'higher' block that's added temporarily would remove the preexisting upload block when it expires.

Duping to bug 4995, as that one predates this and they deal with the same thing.

Would be good if someone had this on their TODO list :)

*** This bug has been marked as a duplicate of bug 4995 ***