Change Details

==== Background A user will have one or more of these rights granted by being a member of a group. In a similar way, a user may have have one or more of these rights revoked by being a member of another group. The latter takes precedence over the former. For more detail, see the MediaWiki Manual entries for [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgGroupPermissions | $wgGroupPermissions ]] and [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgRevokePermissions | $wgRevokePermissions ]]. At the time of writing: * The `ipinfo`, `ipinfo-view-basic`, and `ipinfo-view-full` rights are defined * We intend to grant the `ipinfo` and `ipinfo-view-basic` rights by default to X * In order to revoke those rights, we first need to create a group that revokes them ==== AC * Create a group that revokes at least the `ipinfo` right * Users in the group must not be able to remove themselves from it ==== Notes * This group can be defined in `extension.json`. See https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Extension.json/Schema#RevokePermissions for more detail * The above also links to [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgRevokePermissions | the MediaWiki Manual entry for $wgRevokePermissions ]] * [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgGroupsRemoveFromSelf | $wgGroupsRemoveFromSelf ]] controls groups users can remove themselves from, e.g. ```lang=php $wgGroupsRemoveFromSelf[ 'ipinfo-revoked' ] = false; ``` should be read as "users in the //ipinfo-revoked// group cannot remove themselves from it."

==== Background A user will have one or more of these rights granted by being a member of a group. For more detail, see the MediaWiki Manual entry for [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgGroupPermissions | $wgGroupPermissions ]]. A user may be automatically promoted to a group //just once// using [[ https://www.mediawiki.org/wiki/Manual:$wgAutopromoteOnce | the $wgAutopromoteOnce mechanism ]]. At the time of writing the `ipinfo`, `ipinfo-view-basic`, and `ipinfo-view-full` rights are defined. We first need to define a group that grants the `ipinfo` and `ipinfo-view-basic` rights – the basic rights – to that group. ==== AC * Create a group that grants the `ipinfo` and `ipinfo-view-basic` rights ==== Notes * This group can be defined in `extension.json`. See https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Extension.json/Schema#GroupPermissions for more detail * The above also links to [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgGroupPermissions | the MediaWiki Manual entry for $wgGroupPermissions ]]

==== Background A user will have one or more of these rights granted by being a member of a group. In a similar way, a user may have have one or more of these rights revoked by being a member of another group. The latter takes precedence over the former. For more detail, see the MediaWiki Manual entriesy for [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgGroupPermissions | $wgGroupPermissions ]] and [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgRevokePermissions | $wgRevokePermissions ]]. . A user may be automatically promoted to a group //just once// using [[ https://www.mediawiki.org/wiki/Manual:$wgAutopromoteOnce | the $wgAutopromoteOnce mechanism ]]. At the time of writing: * T the `ipinfo`, `ipinfo-view-basic`, and `ipinfo-view-full` rights are defined * We intend to grant the `ipinfo` and `ipinfo-view-basic` rights by default to X * In order to revoke those rights,. wWe first need to creatdefine a group that revokesgrants the `ipinfo` and `ipinfo-view-basic` rights – them basic rights – to that group. ==== AC * Create a group that revokes at leastgrants the `ipinfo` right * Users in the group must not be able to remove themselves from itand `ipinfo-view-basic` rights ==== Notes * This group can be defined in `extension.json`. See https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Extension.json/Schema#RevokeGroupPermissions for more detail * The above also links to [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgRevokeGroupPermissions | the MediaWiki Manual entry for $wgRevokePermissions ]] * [[ https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgGroupsRemoveFromSelf | $wgGroupsRemoveFromSelf ]] controls groups users can remove themselves from, e.g. ```lang=php $wgGroupsRemoveFromSelf[ 'ipinfo-revoked' ] = false; ``` should be read as "users in the //ipinfo-revoked// group cannot remove themselves from it."GroupPermissions ]]