View source for Manual:Preventing access/uk

<languages />
<span lang="en" dir="ltr" class="mw-content-ltr">For help customizing user rights, see {{ll|Manual:User rights}}.</span>
Дана сторінка містить приклади, корисні для обмеження доступу.

Щоб отримати інформацію про те, як редагувати <code>LocalSettings.php</code>, перевірте {{ll|Manual:LocalSettings.php}}.

__TOC__

{{anchor|Disable anonymous reading}}
<div lang="en" dir="ltr" class="mw-content-ltr">
==Simple private wiki==
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
For the common [[w:use case|use case]] of "a private wiki, for oneself and approved others", you need to:
</div>

*[[#Restrict viewing of all pages|<span lang="en" dir="ltr" class="mw-content-ltr">Restrict viewing</span>]]
*[[#Restrict editing of all pages|<span lang="en" dir="ltr" class="mw-content-ltr">Restrict editing</span>]]
*[[#Restrict account creation|<span lang="en" dir="ltr" class="mw-content-ltr">Restrict account creation</span>]]

{{warning|1=<span lang="en" dir="ltr" class="mw-content-ltr">See the warnings in the sections below; this is simple "general use" code, and may or may not match your requirements.</span>}}

<syntaxhighlight lang="php">
# Disable reading by anonymous users
$wgGroupPermissions['*']['read'] = false;

# Disable anonymous editing
$wgGroupPermissions['*']['edit'] = false;

# Prevent new user registrations except by sysops
$wgGroupPermissions['*']['createaccount'] = false;
</syntaxhighlight>

<span lang="en" dir="ltr" class="mw-content-ltr">Depending on what extensions you have installed, you may want to whitelist more pages.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">For example if you are using the {{ll|Extension:ConfirmAccount}} extension, you probably want Special:RequestAccount whitelisted.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">If the content language of your wiki is not English, you may have to use the translated name of the special pages in question.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Restrict account creation==
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
To restrict account creation, you need to edit ''LocalSettings.php'' in the root path of your MediaWiki installation.
</div>

<syntaxhighlight lang="php">
# Prevent new user registrations except by sysops
$wgGroupPermissions['*']['createaccount'] = false;
</syntaxhighlight>

{{note|1=<span lang="en" dir="ltr" class="mw-content-ltr">You can use the {{ll|Extension:ConfirmAccount|ConfirmAccount}} extension if you want to set up an account confirmation queue.</span> (<span lang="en" dir="ltr" class="mw-content-ltr">If not you may still proceed as follows.</span>)}}

{{note|1=<span lang="en" dir="ltr" class="mw-content-ltr">New users will still be able to be created by sysops, in the following manner:</span>}}

<div lang="en" dir="ltr" class="mw-content-ltr">
#Go to {{blue|Special:Userlogin}}, when logged in as a sysop.
</div>
<div lang="en" dir="ltr" class="mw-content-ltr">
#Click on "Create an account" link to get to the account creation form.
</div>
<div lang="en" dir="ltr" class="mw-content-ltr">
#Enter a username and an email address, and click the "by email" button.
</div> <span lang="en" dir="ltr" class="mw-content-ltr">Note you need {{ll|Manual:$wgEnableEmail|$wgEnableEmail{{=}}true}} or else the sysop must pick a password and send it to the user.</span>
<div lang="en" dir="ltr" class="mw-content-ltr">
#The account will be created with a random password which is then emailed to the given address (as with the "forgot password" feature).
</div> <span lang="en" dir="ltr" class="mw-content-ltr">The user will be requested to change password at first login; when they do this, the email address will also be marked as confirmed.</span>
#:<small><span lang="en" dir="ltr" class="mw-content-ltr">When you click the "create account" button instead, you have to manually send the user their password.</span> <span lang="en" dir="ltr" class="mw-content-ltr">If you've set {{ll|Manual:$wgMinimalPasswordLength|$wgMinimalPasswordLength{{=}}0}} (default configuration up to version 1.15) and you've left the password field blank, the user will be emailed an email address confirmation request but will be unable to access {{ll|Manual:Interface/Special pages summary|Special:Confirmemail}} to perform the confirmation.</span> <span lang="en" dir="ltr" class="mw-content-ltr">Instead, the user will get an error (unless you've added it to {{ll|Manual:$wgWhitelistRead|$wgWhitelistRead}}); the user will be able to login with a blank password and then confirm email, but their password will not have been reset (it will have to be reset manually).</span></small>

<span lang="en" dir="ltr" class="mw-content-ltr">It may be appropriate to edit the text displayed when a non-user attempts to log in.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">This can be done at [[MediaWiki:Nosuchuser]], when logged in as a sysop.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">Use plain text without any special formatting, as the formatting is ignored and the text is literally rendered.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">(Might have changed, see [[Mediazilla:12952|bug 12952]]).</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
You may also modify the contents of the email sent to new users by editing the page [[MediaWiki:Createaccount-text]].
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
To prevent even sysops from creating accounts:
</div>

<syntaxhighlight lang="php">
# Prevent new user registrations by anyone
$wgGroupPermissions['*']['createaccount'] = false;
$wgGroupPermissions['sysop']['createaccount'] = false;
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
To add a message on top of the login form, modify [[MediaWiki:Loginprompt]].
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Restrict editing==
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict editing of all pages===
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">Users will still be able to read pages with these modifications, and they can view the source by using [[Special:Export/Article name]] or other methods.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">See also [[Mediazilla:1859|bug 1859]].</span>

<span lang="en" dir="ltr" class="mw-content-ltr">See {{ll|Help:User rights}} and {{ll|Manual:$wgGroupPermissions}}.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">If you use {{ll|Extension:AbuseFilter}}, any wiki admin can also put various restrictions in place.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
Some examples of how to protect all pages from editing (not reading) by certain classes of users:
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
====Restrict anonymous editing====
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
Requires that a user be registered before they can edit.
</div>

<syntaxhighlight lang="php">
$wgGroupPermissions['*']['edit'] = false;
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
====Restrict editing by all non-sysop users====
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
Requires that a user be a member of the administrators (sysop) usergroup.
</div>

<syntaxhighlight lang="php">
$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['user']['edit'] = false;
$wgGroupPermissions['sysop']['edit'] = true;
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
====Restrict editing by absolutely everyone====
</div>
<syntaxhighlight lang="php">
$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['user']['edit'] = false;
$wgGroupPermissions['sysop']['edit'] = false;
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict editing of an entire namespace===
</div>
{{MW 1.10|and after}}
<span lang="en" dir="ltr" class="mw-content-ltr">Starting from MediaWiki version 1.10, it is possible to protect entire namespaces using the {{ll|Manual:$wgNamespaceProtection|$wgNamespaceProtection}} variable.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">Examples:</span>

<syntaxhighlight lang="php">
# Only allow autoconfirmed users to edit Project namespace
$wgNamespaceProtection[NS_PROJECT] = array( 'autoconfirmed' );

# Don't allow anyone to edit non-talk pages until they've confirmed their
# email address (assuming we have no custom namespaces and allow edits
# from non-emailconfirmed users to start with)
# Note for 1.13: emailconfirmed group and right were removed from default
# setup, if you want to use it, you'll have to re-enable it manually
$wgNamespaceProtection[NS_MAIN]     = $wgNamespaceProtection[NS_USER]  =
$wgNamespaceProtection[NS_PROJECT]  = $wgNamespaceProtection[NS_IMAGE] =
$wgNamespaceProtection[NS_TEMPLATE] = $wgNamespaceProtection[NS_HELP]  =
$wgNamespaceProtection[NS_CATEGORY] = array( 'emailconfirmed' );

# Only allow sysops to edit "Policy" namespace
$wgGroupPermissions['sysop']['editpolicy'] = true;
$wgNamespaceProtection[NS_POLICY] = array( 'editpolicy' );
</syntaxhighlight>

<span lang="en" dir="ltr" class="mw-content-ltr">Note that in the last case it's assumed that a custom namespace exists and that <code>NS_POLICY</code> is a defined constant equal to the namespace number.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">See {{ll|Manual:Using custom namespaces}} and {{ll|Manual:Namespace constants}} for a list of MediaWiki's core namespaces.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict editing of certain specific pages===
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">Use the {{ll|Manual:Administrators#Protection|Protect}} feature.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">By default, any sysop can protect pages so only other sysops can edit them.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">In 1.9 and higher, by default they can also protect pages so only "autoconfirmed" users (with accounts older than a configured period) can edit them.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">This does not require editing configuration files.</span>

<span lang="en" dir="ltr" class="mw-content-ltr">If you want to restrict editing to groups with specific permissions, edit {{ll|Manual:$wgRestrictionLevels|$wgRestrictionLevels}}.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">To prevent actions other than edit and move, use {{ll|Manual:$wgRestrictionTypes|$wgRestrictionTypes}}.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict editing of all but a few pages===
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">To impose a blanket restriction on editing for all pages, but allow a few (such as sandboxes, join request pages, etc.) to be more generously editable, you can use the {{ll|Extension:EditSubpages|nsp=0}} extension.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">This may not fit too often, but you could also use the [[#Restrict editing of certain specific pages|Restrict editing of certain specific pages]] method mentioned above, with all name spaces protected, and only a special one editable by everyone which has all the pages you want editable.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict editing for certain IP address ranges===
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">Schools and other institutions may want to block all edits not from a few specified [[w:IP address|IP address]] ranges.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">To do so, see {{ll|Manual:Block and unblock}}.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">The only way to do this at present <!-- that I know of--> without modifying the code is to go to [[Special:Blockip]] and systematically {{ll|Help:Range blocks|rangeblock}} every one of the address ranges that you don't want to be able to edit.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">This will work for all future versions of MediaWiki.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">It will not work on a per-namespace basis.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict editing by a particular user===
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">Use the user {{ll|Manual:Block and unblock|blocking}} functionality to deprive a user of all edit access.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">MediaWiki does not include a possibility to give rights to separate users directly; instead rights are always given to a user group.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">There is no way in the core software to change permissions of particular users in order to restrict or allow editing particular pages, except by changing their usergroup.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict creating of all pages===
</div>

{{note|1=<span lang="en" dir="ltr" class="mw-content-ltr">Revoking the ''edit'' right already prevents affected users from creating new pages and talk pages.</span>}}

<syntaxhighlight lang="php">
# Anonymous users can't create pages
$wgGroupPermissions['*']['createpage'] = false;

# Only users with accounts four days old or older can create pages
# Requires MW 1.6 or higher.
$wgGroupPermissions['*'            ]['createpage'] = false;
$wgGroupPermissions['user'         ]['createpage'] = false;
$wgGroupPermissions['autoconfirmed']['createpage'] = true;
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict creating pages in certain namespaces===
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">There are separate rights for creating talk pages (createtalk) and creating non-talk pages (createpage).</span>
<span lang="en" dir="ltr" class="mw-content-ltr">If you need per-namespace control finer than that, it is not possible in core MediaWiki, and requires an extension such as {{ll|Extension:Lockdown}}.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Restrict access to uploaded files==
</div>
: ''&rarr; {{ll|Manual:Image authorization}}, {{ll|Manual:img_auth.php|img_auth.php}}, {{ll|Manual:User rights#List of permissions|2=<span lang="en" dir="ltr" class="mw-content-ltr">Manual:User rights (read)</span>}}''

<span lang="en" dir="ltr" class="mw-content-ltr">If you have enabled the ability to upload files, these will be served directly by the underlying web server.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">As a result, '''{{red|account-based access to the file is unrestricted by default}}'''.</span>

{{uploaded-files-access-restriction-info}}

<div lang="en" dir="ltr" class="mw-content-ltr">
=== Example for access restriction to uploaded files in the server configuration ===
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">If sensitive files are uploaded to an internet-accessible wiki, you may wish to add restrictions on where these can be accessed from.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">On Apache, if your local network were 10.1.2.*, you could restrict serving files to local addresses with:</span>

<pre>
  <Location /mediawiki/images>
    Order deny,allow
    Allow from 10.1.2.3
    Deny from all
  </Location>
</pre>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Restrict viewing==
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict viewing of all pages===
</div>
{{warning|1=<span lang="en" dir="ltr" class="mw-content-ltr">If you want anonymous users to be unable to view the wiki markup/code, you should not allow them to edit any page (see [[#Restrict editing of all pages|#Restrict editing of all pages]] above).</span> <span lang="en" dir="ltr" class="mw-content-ltr">If they can edit any page, they can use {{ll|Help:Templates|template inclusion}} to view even pages they can't edit.</span> <span lang="en" dir="ltr" class="mw-content-ltr">This may be possible to avoid by using {{ll|Manual:$wgNonincludableNamespaces|$wgNonincludableNamespaces}}</span>}}

{{warning|1=<span lang="en" dir="ltr" class="mw-content-ltr">This method allows any visitor to view the wiki after creating an account.</span> <span lang="en" dir="ltr" class="mw-content-ltr">You may wish to combine it with [[#Restrict account creation|#Restrict account creation]] above.</span>}}

{{warning|1=<span lang="en" dir="ltr" class="mw-content-ltr">Uploaded images will still be viewable to anyone who knows the image directory's name.</span> <span lang="en" dir="ltr" class="mw-content-ltr">Either point {{ll|Manual:$wgUploadPath|$wgUploadPath}} to the img_auth.php script and follow the instructions in {{ll|Manual:Image authorization}}, or use some external method to protect images, like .htaccess.</span>}}

{{warning|1=<span lang="en" dir="ltr" class="mw-content-ltr">Wiki pages like <code>MediaWiki:Common.css</code> and <code>MediaWiki:Gadget-foo.css</code> may be part of a public ResourceLoader module, and thus can have their source code exposed through [[ResourceLoader|load.php]]. Turn off {{wg|UseSiteJs}} and {{wg|UseSiteCss}} to disable this functionality.</span>}}

{{note|1=<span lang="en" dir="ltr" class="mw-content-ltr">If anonymous users can't view your page, neither can search engines.</span> <span lang="en" dir="ltr" class="mw-content-ltr">Your site will not be indexed on Google.</span>}}

<div lang="en" dir="ltr" class="mw-content-ltr">
Add this line to your LocalSettings.php file:
</div>

<syntaxhighlight lang="php">
# Disable reading by anonymous users
$wgGroupPermissions['*']['read'] = false;

# But allow them to read e.g., these pages:
$wgWhitelistRead = [ "Main Page", "Help:Contents" ];
</syntaxhighlight>

<span lang="en" dir="ltr" class="mw-content-ltr">The <code>{{ll|Manual:$wgWhitelistRead|$wgWhitelistRead}}</code> setting allows users to view the main page.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">If page names have more than one word, use a space " " between them, not an underscore "_".</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
In addition to the main page of such a private site, you could give access to the Recentchanges page (if you think that its content isn't private) for feed readers by adding Special:Recentchanges to <code>{{ll|Manual:$wgWhitelistRead|$wgWhitelistRead}}</code>.
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
If you need to protect even the sidebar, main page, or login screen for any reason, it's recommended that you use higher-level authentication such as .htpasswd or equivalent.
</div>

{{Security warning 2021-12}}

{{note|1=<span lang="en" dir="ltr" class="mw-content-ltr">Although [[Special:Listusers]] won't be available, it can be determined if a username is correct from Userlogin errors.</span> <span lang="en" dir="ltr" class="mw-content-ltr">You may want to give a common text for [[MediaWiki:wrongpassword]] and [[MediaWiki:nosuchusershort]].</span>}}

<div lang="en" dir="ltr" class="mw-content-ltr">
===Restrict viewing of certain specific pages===
</div>
{{Page security extension disclaimer}}

<span lang="en" dir="ltr" class="mw-content-ltr">To prevent anyone but sysops from viewing a page, it can simply be {{ll|Help:Deletion and undeletion|deleted}}.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">To prevent even sysops from viewing it, it can be removed more permanently using {{ll|Manual:RevisionDelete}}.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">To completely destroy the text of the page, it can be manually removed from the database.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">In any case, the page cannot be edited while in this state, and for most purposes no longer exists.</span>

<span lang="en" dir="ltr" class="mw-content-ltr">To have a page act normally for some users but be invisible to others, as is possible for instance in most forum software, is a very different matter.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">MediaWiki is designed for two basic access modes:</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
# Everyone can view every single page on the wiki (with the possible exception of a few special pages).
</div> <span lang="en" dir="ltr" class="mw-content-ltr">This is the mode used by Wikipedia and its sister projects.</span>
<div lang="en" dir="ltr" class="mw-content-ltr">
# Anonymous users can only view the Main Page and login page, and cannot edit any page.
</div> <span lang="en" dir="ltr" class="mw-content-ltr">This is basically the same as the above, in terms of technical implementation (just an extra check for every page view), which is why it exists.</span> <span lang="en" dir="ltr" class="mw-content-ltr">This is the mode of operation used by certain private wikis such as those used by various Wikimedia committees.</span>

'''<span lang="en" dir="ltr" class="mw-content-ltr">If you intend to have different view permissions than that, MediaWiki is not designed for your usage.</span>'''
(<span lang="en" dir="ltr" class="mw-content-ltr">See [[phab:T3924|T3924]].</span>)
<span lang="en" dir="ltr" class="mw-content-ltr">Data is not necessarily clearly delineated by namespace, page name, or other criteria, and there are a lot of leaks you'll have to plug if you want to make it so (see ''{{ll|security issues with authorization extensions}}'' for a sample).</span>
<span lang="en" dir="ltr" class="mw-content-ltr">Other wiki software may be more suitable for your purpose.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">You have been warned.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">If you must use MediaWiki, there are three basic possibilities:</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
# Set your wiki up private and whitelist specific pages that will be public with <code>{{ll|Manual:$wgWhitelistRead|$wgWhitelistRead}}</code> in the LocalSetting.php file.
</div> <span lang="en" dir="ltr" class="mw-content-ltr">See the section above.</span>
<div lang="en" dir="ltr" class="mw-content-ltr">
# Set up separate wikis with a {{ll|Manual:$wgSharedDB|shared user database}}, configure one as viewable and one as unviewable ([[#Disable anonymous reading|see above]]), and {{ll|Help:Interwiki linking|make interwiki links}} between them.
</div>
<div lang="en" dir="ltr" class="mw-content-ltr">
# Install a third-party hack or extension.
</div> <span lang="en" dir="ltr" class="mw-content-ltr">You will have to reapply it every time you upgrade the software, and it may not be updated immediately when new security fixes or upgrades of MediaWiki are released.</span> <span lang="en" dir="ltr" class="mw-content-ltr">Third-party hacks are, of course, not supported by MediaWiki developers, and if you're having problems you shouldn't ask on MediaWiki-l, #mediawiki, or other official support channels.</span> <span lang="en" dir="ltr" class="mw-content-ltr">A number of hacks are listed in {{ll|Category:Page specific user rights extensions}}.</span> <span lang="en" dir="ltr" class="mw-content-ltr">Read about {{ll|security issues with authorization extensions}} if you plan to use one of those.</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Restricting exporting==
</div>
''<span lang="en" dir="ltr" class="mw-content-ltr">See also:</span> {{ll|Manual:Parameters to Special:Export}}''

<div lang="en" dir="ltr" class="mw-content-ltr">
It is not possible to export the contents of a page that cannot be read since {{rev|19935}}.
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Removing the Login link from all pages==
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">One can remove the login/create account link from the upper right corner of all pages, as users can still go to [[Special:SpecialPages]] > [[Special:UserLogin]] to login.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">In LocalSettings.php use (tested with MediaWiki 1.16)</span>

<syntaxhighlight lang="php">
function NoLoginLinkOnMainPage( &$personal_urls ){
    unset( $personal_urls['login'] );
    unset( $personal_urls['anonlogin'] );
    return true;
}
$wgHooks['PersonalUrls'][]='NoLoginLinkOnMainPage';
</syntaxhighlight>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Removing accounts==
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">If you want to completely remove access to a user, e.g. on a [[#Simple private wiki|simple private wiki]], it's not possible to simply delete the account ({{ll|Manual:removeUnusedAccounts.php|unless no edits have been made}}); you can {{ll|Manual:Block and unblock|block}} it, but the user will still {{ll|Manual:Block_and_unblock#Effects_of_being_blocked|be able}} to read pages.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">However, using {{ll|Extension:User Merge and Delete|nsp=0}} extension you can merge the account in another one and delete the former; the original account will then "disappear".</span>
<span lang="en" dir="ltr" class="mw-content-ltr">If you want to preserve history readability (i.e., to have edits from the user to be still shown under their name), you can create a new account e.g. with username "OriginalUserName (deactivated)" and then merge "OriginalUserName" into the former, or even use {{ll|Extension:Renameuser|nsp=0}} extension to rename "OriginalUserName" into "AnotherUserName", then create an account under "OriginalUserName" and merge "AnotherUserName" into it: in this manner, "OriginalUserName" will be completely "usurped" (if you've set a non-null password).</span>

<div lang="en" dir="ltr" class="mw-content-ltr">
Since MediaWiki 1.16.0, it is possible to set {{ll|Manual:$wgBlockDisablesLogin|$wgBlockDisablesLogin}} to true to prevent access and reading to blocked users.
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
==Other restrictions==
</div>
<span lang="en" dir="ltr" class="mw-content-ltr">You may want to have pages editable only by their creator, or ban viewing of history, or any of a number of other things.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">None of these features are available in an unhacked version of MediaWiki.</span>
<span lang="en" dir="ltr" class="mw-content-ltr">If you need more fine-grained permissions, see the [[#See also|#See also]] section for links to other wiki packages that are designed for this, as well as hacks that attempt to contort MediaWiki into something it's not designed to be but may work anyway.</span>

<span id="See_also"></span>
== Див. також ==

Деякі пов'язані сторінки посібника/довідки можуть представляти інтерес:

*{{ll|Manual:LocalSettings.php}}
*{{ll|Manual:$wgGroupPermissions}}
*{{ll|Manual:$wgRestrictionTypes}}
*{{ll|Manual:$wgRestrictionLevels}}
*{{ll|Manual:$wgNamespaceProtection}}
*{{ll|Manual:$wgEmailConfirmToEdit}}
*{{ll|Manual:$wgNonincludableNamespaces}}
*{{ll|Manual:User rights}}
*{{ll|Help:User rights and groups}}

'''Інше програмне забезпечення вікі''' може мати ліпшу підтримку дрібнозернистого контролю доступу за MediaWiki:

*[http://moinmo.in/HelpOnAccessControlLists MoinMoin]
*[http://twiki.org/ TWiki]
*[http://tikiwiki.org/ TikiWiki] - має повністю налаштовуваний контроль доступу до можливостей і рівнів дозволів.

Якщо ви хочете ліпший контроль доступу, але хочете використовувати MediaWiki, це список '''розширень''' і хаків для дозволу обмежень, неможливих у програмному забезпеченні належним чином.
Ці хаки можуть бути застарілими (перевірте версію, для якої вони).
Будь ласка, не питайте в офіційних каналах підтримки MediaWiki, якщо щось піде не так зі сторонніми хаками.

*{{ll|Extension:FlaggedRevs|Extension:Flagged Revisions}}
*{{ll|Extension:Moderation}}
*{{ll|Extension:Approved Revs}}
*{{ll|Extension:Lockdown}}
*{{ll|Extension:AuthorProtect}}
*{{ll|Extension:EditSubpages}} -  обмежує анонімних користувачів від редагування більшості сторінок
*{{ll|Extension:NSFileRepo}}

[[Category:MediaWiki configuration{{#translation:}}]]
[[Category:Configure{{#translation:}}]]
[[Category:Permission{{#translation:}}]]
[[Category:Namespace{{#translation:}}]]