Wiki
Clone wikiRecursive IAC / Home
Recursive Improved Access Control for Mediawiki
This version enriches standard IAC with several features desirable in larger wikis:
- Recursivity. Accesscontrol tag in page is applied to subpages unless they declare their own accesscontrol
- Support for fake namespaces
- Overriding recursivity -- <accesscontrol>ALL</accesscontrol> will "disable" accesscontrol for this page and subpages unless they define their own <accesscontrol> tag
- Secure transclusions -- page which is transcluded must have same or less restricted (more groups allowed) accesscontrol. Attempts to do insecure transclusion are at both preview and edit wrapped with <nowiki>
Example flow
- Let's say you visit page called FakeNS:AAA/BBB/CCC
- Has FakeNS:AAA/BBB/CCC it's own <accesscontrol> tag in it? If yes, use it, otherwise continue to FakeNS:AAA/BBB
- Has FakeNS:AAA/BBB it's own <accesscontrol> tag in it? If yes, use it for our visited page, otherwise continue to FakeNS:AAA
- Has FakeNS:AAA it's own <accesscontrol> tag in it? If yes, use it for our visited page, otherwise continue to FakeNS
- Has FakeNS it's own <accesscontrol> tag in it? If yes, use it for our visited page, otherwise continue:
- No accesscontrol tag found, so page is free to access for all
- Now also supports proper namespaces (same way as FakeNS)
##Supported versions## * Was tested on Mediawiki 1.16 and 1.19. * Few patches were needed for 1.16 support: see 33a04f1, 5b18117 * Won't work in versions lesser than 1.16 because of missing preview hook
Sorry but at the moment we can't really support:
- Paranoid security - we care about security, but we have no security audits and stuff. Breach doesn't cause much for us.
- Wide variety of Mediawiki versions. We have one large wiki we use Recursive IAC and my (developers) machine
##Patches## I'd gladly accept any patches
Updated