Page MenuHomePhabricator

Restrict Special:Listusers to specific group(s)
Closed, ResolvedPublic

Description

Hi,

For legal reasons, I would like to restrict the information on the members (Special:Listusers) of a group to only members of that group. Let me detail our needs:

Members of a few different associations are welcomed to a common private wiki.
Any member is "pre" subscribed by her/his official "First_name Last_Name" of the association and their e-mail.
(we set an sql file for that purpose and uploaded it already).

Members can now "voluntary" subscribe to the common wiki by entering their "First_name Last_Name" in the login area and asking for a password to be sent by e-mail. A "voluntary subscribed member" is defined if he/she log in and changed the password. This list of voluntary members must, for legal reasons, be accessible only to the voluntary members (of whatever association).

How to restrict Special:Listusers to only voluntary subscribed members?

Is there a better way to give a right to subscription to members without fully subscribing members reluctant to a wiki?

Many thanks for any information on this subject because I haven't found discussion on this aspect yet.


Version: unspecified
Severity: enhancement

Details

Reference
bz20937

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:57 PM
bzimport set Reference to bz20937.
bzimport added a subscriber: Unknown Object (MLST).

You can use http://www.mediawiki.org/wiki/Extension:LockDown to restrict access to Special:Listusers. For this you'll need to install and then select which groups can access Special:ListUsers, let's say "sysop":

$wgSpecialPageLockdown['Listusers'] = array( 'sysop' );

You can allow multiple groups to access Special:Listusers, for this you can use:

$wgSpecialPageLockdown['Listusers'] = array( 'sysop', 'some-other-group' );

and any member of 'sysop' and/or 'some-other-group' will be able to access that page. You may need to create a new group for those you want to be able access Special:Listusers.

LockDown extension already provides the requested feature.