Change Details

Similar to the existing `$wgOATHRequiredForGroups` config variable, we would create a new config variable along the lines of `$wgOATHRequiredForAddingGroups`. Various privileged groups (or rights) would be added to this config variable. We would then hook into various rights-granting code within MediaWiki and, for users with bureaucrat rights/roles //who do not have some form of MFA enabled//, they would not be able to promote other users to the list of protected groups or rights.

Similar to the existing `$wgOATHRequiredForGroups` config variable, we would create a new config variable along the lines of `$wgOATHRequiredForAddingGroups`. Various privileged groups (or rights) would be added to this config variable. We would then hook into various rights-granting code within MediaWiki and, for users with bureaucrat rights/roles //who do not have some form of MFA enabled//, they would not be able to promote other users to the list of privileged groups or rights.

Similar to the existing `$wgOATHRequiredForGroups` config variable, we would create a new config variable along the lines of `$wgOATHRequiredForAddingGroups`. Various privileged groups (or rights) would be added to this config variable. We would then hook into various rights-granting code within MediaWiki and, for users with bureaucrat rights/roles //who do not have some form of MFA enabled//, they would not be able to promote other users to the list of protectprivileged groups or rights.