Mailing List Archive

limiting write access to a media wiki
I'm new to implementing a media wiki so bear with me if what follows
is(are) FAQ(s).

I'm working on building a set of howtos for the users here. I like the
format and control that a mediawiki gives me. What I want to do is be
able to limit who has write access to the wiki and from where.

I'd like to be able to do the following:

1. limit write access to machines only on our local network
2. limit write access to users who login so we can track changes
3. limit user accounts to specific people.

I'm working at a college of computer science and so I don't want to,
right off the bat, enable all of the students with write access. I would
like to get there eventually but I'd like to start out with only a small
number of users who have write access and then grow that group over time.

So, pointers to what I should read to get up to speed on this would be
great.

I do have the wiki set up and running so that's not a problem.
Re: limiting write access to a media wiki [ In reply to ]
On Fri, 12 Nov 2004 13:26:06 -0500, Colin Johnson <colinj@ccs.neu.edu> wrote:
> I'm new to implementing a media wiki so bear with me if what follows
> is(are) FAQ(s).
>
> I'd like to be able to do the following:
>
> 1. limit write access to machines only on our local network

Put the wiki behind a firewall. Or use your option 3 too lock it.

> 2. limit write access to users who login so we can track changes

http://meta.wikimedia.org/wiki/MediaWiki_FAQ#How_do_I_allow_only_logged-in_users_to_edit.3F
http://meta.wikimedia.org/wiki/Setting_user_rights_in_MediaWiki

> 3. limit user accounts to specific people.

http://meta.wikimedia.org/wiki/Preventing_Access

> I'm working at a college of computer science and so I don't want to,
> right off the bat, enable all of the students with write access. I would
> like to get there eventually but I'd like to start out with only a small
> number of users who have write access and then grow that group over time.

Understood but a complete lock out is against the spirit of Wikis.
Disabling anonymous edits to allow tracking should be enough. Or did I
forget how college kids are?


--


______________________________________________________
Thanks.
/Sebast.

Visit us at http://limpingsquad.kicks-ass.org:8888/
______________________________________________________
Re: limiting write access to a media wiki [ In reply to ]
>>>>> "Colin" == Colin Johnson <colinj@ccs.neu.edu> writes:

Colin> I'm working on building a set of howtos for the users here. I
Colin> like the format and control that a mediawiki gives me. What I
Colin> want to do is be able to limit who has write access to the wiki
Colin> and from where.

Colin> I'd like to be able to do the following:

Colin> 1. limit write access to machines only on our local network
Colin> 2. limit write access to users who login so we can track changes
Colin> 3. limit user accounts to specific people.

Colin> I'm working at a college of computer science and so I don't
Colin> want to, right off the bat, enable all of the students with
Colin> write access. I would like to get there eventually but I'd like
Colin> to start out with only a small number of users who have write
Colin> access and then grow that group over time.


Hi Colin.

I'm not going to try to answer your questions, but instead make a few
comments that you might consider.

The main suggestion is that you consider letting the wiki be open
initially and shutting off access as need be, rather than locking it
down from the outset with a plan to selectively open it. I think a far
more interesting and potentially rich experience is to move (if
needed) from open to closed. There's nothing to be too concerned
about: if it doesn't work, you tighten things up. Lawyers might
disagree, I know. Plus, your aim to develop Howto documents in a wiki
is a perfect scenario for having many people making improvements and
adding information that a few people would take for granted, get
wrong, leave out, under-describe, etc. You can't predict the content
of the wiki, and that's great and well aligned with user manuals (or
howtos) which are notoriously bad at predicting the needs of actual
users. So it feels to me like you've chosen the right tool (the wiki)
and are now looking for a way to (initially) turn off the power it
brings you rather than just letting the thing fly and seeing what
happens. You might be surprised. If you lock it down, the whole
project loses interest, becomes somehow much less attractive, you're
just making another set of manuals.

Here's a perhaps relevant example. I'm teaching a (graduate level,
admittedly) class on computer science theory and algorithms. I set up a
wiki for the class - with just a few basic pages: the syllabus, the
evaluation, some admin details, a page with some of my info on it. I
introduced the wiki on day 1 and pushed them to start using it
(everyone made a page about themselves and linked it in). Plus, each
class has an assigned note taker, and the note taker (and others, of
course) puts stuff into the wiki. The people in the class can do
anything they want to the wiki: change the syllabus, change the page
that says how they will be evaluated, write stuff about each other or
me, deface things, delete things etc. But.... none of this has
happened. I was expecting I'd perhaps have to lock down some pages or
restrict write access to logged-in users, etc., but no. On the other
hand, good things you would not anticipate have happened: students
start taking notes on the class before the class happens! - they're out
there digging up stuff they think is interesting on upcoming subject
and writing and linking it up in the wiki. I go and look at the
syllabus for the day to see what I said I'd teach, and I find notes
already done with stuff someone thinks is important and wants to hear
about. I've had a kid sitting in class taking notes and updating the
wiki as the class happens (while I simultaneously have the wiki up on
an overhead projection system). There are also little things that I
would never have thought of (and didn't have to), like someone putting
a link to the Greek alphabet onto the front page of the wiki - to help
everyone learn the various letters seen in the math. It's pretty cool.

Maybe that's some food for thought for you. And no, you can't have the
URL of the class wiki :-)

Regards,
Terry Jones.
Re: limiting write access to a media wiki [ In reply to ]
<many very good suggestions and thoughts from Terry Jones deleted only
for space>

Terry,

Thanks, your thoughts and ideas are all very good and pretty much right
on with my own thinking. However, there are folks around me (including
my boss) who are concerned about folks being able to change some of our
"canonical" how-tos in a detrimental manner. I'm not so sure that I am
concerned about this but I do have to take the concerns of other folks
here into putting this together.

The goal, as stated by everyone here, is to eventually allow the whole
community to add to the wiki. The general thinking here is that it is
easier to give folks rights rather than take them away.

What would really come in handy in this case would be a way to tie the
wiki into something like LDAP so we could use that for authentication.
That would allow us to use our existing user database instead of having
to have our users create new accounts related just to the wiki.

Thanks again for the good thoughts, I am taking them into account.

Colin J.
RE: limiting write access to a media wiki [ In reply to ]
Hi Colin,

actually it is pretty easy to tweak the wiki so that only people you give permission can write and read. I have set up a wiki for internal use for our organisation, which can be reached within the netwerk as well from the outside (routed an ip-adress to the wiki on the server with apache).

--------------
1. Limit write acces: i haven't figured out on local network level, instead, only people who have an account can write and read and control who can make users.

From http://meta.wikimedia.org/wiki/Setting_user_rights_in_MediaWiki:

Configuring access restrictions to your wiki
Also see Preventing_Access You can customise user restrictions by placing some or all of the commands below into LocalSettings.php.

# Specify who can edit: true means only logged in users may edit pages
$wgWhitelistEdit = true;

# Pages anonymous (not-logged-in) users may see
$wgWhitelistRead = array ("Main Page", "Special:Userlogin", "Wikipedia:Help");

# Specify who may create new accounts: 0 means no, 1 means yes
$wgWhitelistAccount = array ( 'user' => 0, 'sysop' => 1, 'developer' => 1 );

2. Create a user with sysop rights with the following sql query:

mysql> UPDATE user SET user_rights='bureaucrat,sysop' WHERE user_name='The Username';

The "user" in the above text is the user table in the wikidb database.

The user_rights field is actually a comma-separated list; presently four values are recognized by the software:

The Username is the person you want to give sysop rights.

3. If you want to add users, login with sysop rights and find the page Special:Userlogin and create a new user.

----------------

People from the outside still can see the frontpage, but can't read, edit or create an account.

Good luck!

Geert



-----Oorspronkelijk bericht-----
Van: mediawiki-l-bounces@Wikimedia.org
[mailto:mediawiki-l-bounces@Wikimedia.org]Namens Terry Jones
Verzonden: vrijdag 12 november 2004 22:39
Aan: MediaWiki announcements and site admin list
Onderwerp: Re: [Mediawiki-l] limiting write access to a media wiki



>>>>> "Colin" == Colin Johnson <colinj@ccs.neu.edu> writes:

Colin> I'm working on building a set of howtos for the users here. I
Colin> like the format and control that a mediawiki gives me. What I
Colin> want to do is be able to limit who has write access to the wiki
Colin> and from where.

Colin> I'd like to be able to do the following:

Colin> 1. limit write access to machines only on our local network
Colin> 2. limit write access to users who login so we can track changes
Colin> 3. limit user accounts to specific people.

Colin> I'm working at a college of computer science and so I don't
Colin> want to, right off the bat, enable all of the students with
Colin> write access. I would like to get there eventually but I'd like
Colin> to start out with only a small number of users who have write
Colin> access and then grow that group over time.


Hi Colin.

I'm not going to try to answer your questions, but instead make a few
comments that you might consider.

The main suggestion is that you consider letting the wiki be open
initially and shutting off access as need be, rather than locking it
down from the outset with a plan to selectively open it. I think a far
more interesting and potentially rich experience is to move (if
needed) from open to closed. There's nothing to be too concerned
about: if it doesn't work, you tighten things up. Lawyers might
disagree, I know. Plus, your aim to develop Howto documents in a wiki
is a perfect scenario for having many people making improvements and
adding information that a few people would take for granted, get
wrong, leave out, under-describe, etc. You can't predict the content
of the wiki, and that's great and well aligned with user manuals (or
howtos) which are notoriously bad at predicting the needs of actual
users. So it feels to me like you've chosen the right tool (the wiki)
and are now looking for a way to (initially) turn off the power it
brings you rather than just letting the thing fly and seeing what
happens. You might be surprised. If you lock it down, the whole
project loses interest, becomes somehow much less attractive, you're
just making another set of manuals.

Here's a perhaps relevant example. I'm teaching a (graduate level,
admittedly) class on computer science theory and algorithms. I set up a
wiki for the class - with just a few basic pages: the syllabus, the
evaluation, some admin details, a page with some of my info on it. I
introduced the wiki on day 1 and pushed them to start using it
(everyone made a page about themselves and linked it in). Plus, each
class has an assigned note taker, and the note taker (and others, of
course) puts stuff into the wiki. The people in the class can do
anything they want to the wiki: change the syllabus, change the page
that says how they will be evaluated, write stuff about each other or
me, deface things, delete things etc. But.... none of this has
happened. I was expecting I'd perhaps have to lock down some pages or
restrict write access to logged-in users, etc., but no. On the other
hand, good things you would not anticipate have happened: students
start taking notes on the class before the class happens! - they're out
there digging up stuff they think is interesting on upcoming subject
and writing and linking it up in the wiki. I go and look at the
syllabus for the day to see what I said I'd teach, and I find notes
already done with stuff someone thinks is important and wants to hear
about. I've had a kid sitting in class taking notes and updating the
wiki as the class happens (while I simultaneously have the wiki up on
an overhead projection system). There are also little things that I
would never have thought of (and didn't have to), like someone putting
a link to the Greek alphabet onto the front page of the wiki - to help
everyone learn the various letters seen in the math. It's pretty cool.

Maybe that's some food for thought for you. And no, you can't have the
URL of the class wiki :-)

Regards,
Terry Jones.
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l@Wikimedia.org
http://mail.wikipedia.org/mailman/listinfo/mediawiki-l