Draft a set of configuration settings to implement the permissions for the API Portal
Requirements:
* Docs-editors group
* Create pages
* Edit pages
* Logged-in users
* Manage app credentials
* Post to talk pages
* Anonymous users
* View pages
References:
* https://www.mediawiki.org/wiki/Manual:$wgNamespaceProtection
---
Suggested additions for pre-launch (WIP): Intended to make content private until launch
```lang=php
$wgGroupPermissions['*']['read'] = false;
$wgGroupPermissions['user']['read'] = false;
$wgGroupPermissions['docseditor']['read'] = true;
$wgWhitelistRead = [
"Main Page", "Special:UserLogin"
];
```
Suggested config: Launch (WIP)
```lang=php
$wgGroupPermissions['user']['move'] = false;
$wgGroupPermissions['user']['move-subpages'] = false;
$wgGroupPermissions['user']['edit'] = false;
$wgGroupPermissions['user']['createpage'] = false;
$wgGroupPermissions['docseditor']['docseditor'] = true;
$wgGroupPermissions['docseditor']['move'] = true;
$wgGroupPermissions['docseditor']['move-subpages'] = true;
$wgGroupPermissions['docseditor']['edit'] = true;
$wgGroupPermissions['docseditor']['createpage'] = true;
$wgGroupPermissions['sysop']['docseditor'] = true;
$wgGroupPermissions['sysop']['move'] = true;
$wgGroupPermissions['sysop']['move-subpages'] = true;
$wgGroupPermissions['sysop']['edit'] = true;
$wgGroupPermissions['sysop']['createpage'] = true;
$wgGroupPermissions['bureaucrat']['docseditor'] = true;
$wgGroupPermissions['bureaucrat']['move'] = true;
$wgGroupPermissions['bureaucrat']['move-subpages'] = true;
$wgGroupPermissions['bureaucrat']['edit'] = true;
$wgGroupPermissions['bureaucrat']['createpage'] = true;
$wgNamespaceProtection[NS_MAIN] = [ 'docseditor' ];
$wgNamespaceProtection[NS_PROJECT] = [ 'docseditor' ];
// Local uploads are disabled...
$wgNamespaceProtection[NS_FILE] = [ 'docseditor' ];
$wgNamespaceProtection[NS_TEMPLATE] = [ 'docseditor' ];
$wgNamespaceProtection[NS_HELP] = [ 'docseditor' ];
$wgNamespaceProtection[NS_CATEGORY] = [ 'docseditor' ];
```