Category:Page specific user rights extensions
From Linux Web Expert
<translate> The <tvar name=pagename>Page specific user rights extensions</tvar> category contains various extensions that attempt to restrict a user's access to specific pages based on the namespace, category links, and/or title patterns.</translate> <translate> Before installing one of these extensions, users should be aware that such extensions are likely to exhibit three significant problems:</translate>
- <translate> caching problems:</translate> <translate> MediaWiki's page caching facilities do not currently support rights-specific caching.</translate> <translate> That means MediaWiki caches one versions of a page and then serves that page to everyone without rechecking to see if the next user has the proper rights.</translate> <translate> Any extension that tries to exclude or hide part of a page based on user rights is likely to result in performance declines (if caching is turned off) and/or security leaks when a page cached for a user with higher rights is later viewed by a user with lesser rights.</translate>
- <translate> multiple exit paths:</translate> <translate> Page content has many exit paths in MediaWiki: direct page views, excerpts inserted into search results, special pages, RSS feeds, and numerous extensions that read directly from the MediaWiki database.</translate> <translate> There is no one exit path that either the MediaWiki core or its extensions rely on.</translate> <translate> Hence it is virtually impossible for any extension to provide full security.</translate>
- <translate> system security:</translate> <translate> Content management security is inseparable from overall system security.</translate> <translate> The default MediaWiki configuration places database passwords in plain text on a file located on the same server as the MediaWiki installation.</translate> <translate> There is no attempt to secure the host web server or underlying database.</translate> <translate> If the underlying system is insecure, any extension added on top of that system is also insecure.</translate>
<translate> If you need per-page or partial page access restrictions, you are advised to install an appropriate content management package.</translate> <translate> MediaWiki was not written to provide per-page access restrictions, and almost all hacks or patches promising to add them will likely have flaws somewhere, which could lead to exposure of confidential data.</translate> <translate> We are not responsible for anything being leaked.</translate>
<translate> For further details, see [[<tvar name=1>Special:MyLanguage/Security issues with authorization extensions</tvar>|Security issues with authorisation extensions]]</translate> |
| <translate> Extension</translate> | <translate> Status</translate> | <translate> Works with caching</translate> | <translate> Works with MediaWiki groups</translate> | <translate> Page-based access control</translate> | <translate> Namespace-based access control</translate> | <translate> Add ACL by editing page</translate> | <translate> Add ACL via special page</translate> | <translate> MediaWiki version supported</translate> |
|---|---|---|---|---|---|---|---|---|
| Extension:Lockdown | <translate> stable</translate> | Yes | Yes | No | Yes | No | No | 1.31+ |
| Extension:AccessControl | <translate> stable</translate> | Yes | Yes | Yes | Yes | Yes | No | 1.34+ |
| Extension:NSFileRepo | <translate> stable</translate> | Yes | Yes | No | Yes | No | No | 1.27, 1.35 |
| Extension:UserProtect | <translate> beta</translate> | Yes | No (<translate> user based</translate>) | Yes | No | No | Yes (<translate> page action</translate>) | 1.35 |
| Extension:PageOwnership | <translate> stable</translate> | Yes | Yes | Yes | Yes | No | Yes | 1.35+ |
| Extension:PagePermissions | stable | Yes | No (<translate> user based</translate>) | Yes | No | No | Yes (<translate> page action</translate>) | 1.38+ |
| Extension:Semantic ACL | <translate> beta</translate> | No | Yes | Yes | No | Yes | No | 1.38+ |
| <translate> Extension</translate> | <translate> Status</translate> | <translate> Works with caching</translate> | <translate> Works with MediaWiki groups</translate> | <translate> Page-based access control</translate> | <translate> Namespace-based access control</translate> | <translate> Add ACL by editing page</translate> | <translate> Add ACL via special page</translate> | <translate> MediaWiki version supported</translate> |
| <translate> Extension</translate> | <translate> Handles transclusion</translate> | <translate> Handles preview</translate> | <translate> Handles raw</translate> | <translate> Handles search</translate> | <translate> Handles export</translate> | <translate> Handles rss/atom</translate> | <translate> Handles recent changes</translate> |
|---|---|---|---|---|---|---|---|
| Extension:Lockdown | $wgNonincludableNamespaces | $wgNonincludableNamespaces | Yes | <translate> partial (title listed, but no content)</translate> | Yes | <translate> partial (title listed, but no content)</translate> | <translate> partial (title listed, but no content)</translate> |
| Extension:NSFileRepo | $wgNonincludableNamespaces | $wgNonincludableNamespaces | Yes | <translate> partial (title listed, but no content)</translate> | Yes | <translate> partial (title listed, but no content)</translate> | <translate> partial (title listed, but no content)</translate> |
| Extension:UserProtect (<translate> doesn't block read</translate>) | No | No | No | No | No | No | No |
| Extension:PageOwnership | Yes | ? | ? | <translate> partial (title listed, but no content)</translate> | Yes | ? | <translate> <tvar name="1">RecentChanges</tvar> special page can be forbidden</translate> |
| Extension:Semantic ACL | Yes | Yes | Yes | Yes | Yes | ? | No |
| <translate> Extension</translate> | <translate> Handles transclusion</translate> | <translate> Handles preview</translate> | <translate> Handles raw</translate> | <translate> Handles search</translate> | <translate> Handles export</translate> | <translate> Handles rss/atom</translate> | <translate> Handles recent changes</translate> |
<translate>
See also
</translate>
Pages in category "Page specific user rights extensions"
The following 24 pages are in this category, out of 24 total.
