Wiki

Clone wiki

Recursive IAC / Home

Recursive Improved Access Control for Mediawiki

This version enriches standard IAC with several features desirable in larger wikis:

  • Recursivity. Accesscontrol tag in page is applied to subpages unless they declare their own accesscontrol
  • Support for fake namespaces
  • Overriding recursivity -- <accesscontrol>ALL</accesscontrol> will "disable" accesscontrol for this page and subpages unless they define their own <accesscontrol> tag
  • Secure transclusions -- page which is transcluded must have same or less restricted (more groups allowed) accesscontrol. Attempts to do insecure transclusion are at both preview and edit wrapped with <nowiki>

Example flow

  • Let's say you visit page called FakeNS:AAA/BBB/CCC
  • Has FakeNS:AAA/BBB/CCC it's own <accesscontrol> tag in it? If yes, use it, otherwise continue to FakeNS:AAA/BBB
  • Has FakeNS:AAA/BBB it's own <accesscontrol> tag in it? If yes, use it for our visited page, otherwise continue to FakeNS:AAA
  • Has FakeNS:AAA it's own <accesscontrol> tag in it? If yes, use it for our visited page, otherwise continue to FakeNS
  • Has FakeNS it's own <accesscontrol> tag in it? If yes, use it for our visited page, otherwise continue:
  • No accesscontrol tag found, so page is free to access for all
  • Now also supports proper namespaces (same way as FakeNS)

##Supported versions## * Was tested on Mediawiki 1.16 and 1.19. * Few patches were needed for 1.16 support: see 33a04f1, 5b18117 * Won't work in versions lesser than 1.16 because of missing preview hook

Sorry but at the moment we can't really support:

  • Paranoid security - we care about security, but we have no security audits and stuff. Breach doesn't cause much for us.
  • Wide variety of Mediawiki versions. We have one large wiki we use Recursive IAC and my (developers) machine

##Patches## I'd gladly accept any patches

Updated