Author: mkosek
Description:
Currently, OpenID extension check and use standard 'createaccount' permission to create mediawiki users for new users coming from OpenID authenticate.
This works OK unless I want to restrict anonymous account creation only to OpenID users and do not let anonymous users to create a new user via standard New user form. I had to set $wgOpenIDLoginOnly to true to achieve what I want, but it is suboptimal because existing non-openid users are not able to authenticate without OpenID.
This could be solved by using AuthPlugin capabilities (http://www.mediawiki.org/wiki/AuthPlugin) and creating new users with 'autocreate' permission so that I can configure mediawiki to only allow auth plugins like OpenID to create new users and forbid creating new users by anonymous users.
Version: master
Severity: normal
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=46617
https://bugzilla.wikimedia.org/show_bug.cgi?id=54677