Author: foalford
Description:
The (ro) feature of AccessControl extension is not exactly working as it describes.
On page http://www.mediawiki.org/wiki/Extension:AccessControl, (ro) can restrict a group's access to read only however it's only valid when the group is a mediawiki's group. When appending (ro) to a user grouplist, it doesn't working. The original design of this feature provides a finer control by appending (ro) to user name in user group definition page.
Fix attached:
- AccessControl.php 2011-08-01 12:30:13.976489543 +1000
+++ AccessControl_modified.php 2011-08-01 11:52:17.411637020 +1000
@@ -91,7 +91,7 @@
if ($access != 'edit') { if (($usersList[$wgUser->getName()] == 'edit') && ($groups[$skupina] == 'edit')) { $access = 'edit';
- } elseif ($usersList[$wgUser->getName()] == 'read') {
+ } elseif ($usersList[$wgUser->getName()] == 'read' || $groups[$skupina] == 'read') {
$access = 'read'; } else { break;
Version: unspecified
Severity: major