Group and permission scheme 🔼

Namespace tree 🔼

[needs to be updated]

  • /
  • community (community wiki)
    • development
    • devuan-devmeetnotes
      • 2017
  • community_doc (kept to avoid broken links after renaming it 'community')
  • devuan_doc (official docs drafting)
  • discuss (default, discussion pages)
  • help (self-explanatory)
  • meta (wiki maintenance etc.)
  • playground (default, name says it all)
  • talk (probably created by the talkpage plugin which may be
  • user (default, users' personal pages)
  • wiki (default, info about the wiki, e.g. syntax reference)

Current setup 🔼

NAME DEFAULT GROUP? DESCRIPTION PERMISSONS
admin 1 superusers superuser
@editor 0 editors edit (incl. "delete"), create pages and namespaces, upload (but not delete) media files throughout the wiki
@user 1 logged-in users read-only access throughout the wiki (except 'playground' namespace and 'user:[username]' page?)
@ALL 1 everyone read-only access throughout the wiki

[a few per-user settings]

Proposed setup 🔼

NAME DEFAULT GROUP? DESCRIPTION PERMISSONS
admin 1 superusers superuser
@manager 1 managers full read-write access throughout the wiki (default?), access to some admin tools (e.g. the revert manager, but not the ACL config; details to be investigated)
@editor 0 editors edit ("delete"), create pages and namespaces, upload and delete media files throughout the wiki (think manager minus access to admin tools)
@devuan_doc 0 devuan doc contributors @user + full write access (incl. upload/delete media files) to 'devuan_doc' namespace (possible exceptions within that)
@community 0 community wiki contributors @user + full write access (incl. upload/delete media files) in 'community' namespace (except '.:development')
@user 1 logged-in users read-only access throughout the wiki; edit/"delete", create pages/namespaces in 'playground', 'user:[username]' and 'discuss' (what about uploading/deleting media files?)
@ALL 1 everyone read-only access throughout the wiki, except for the 'meta' namespace (access denied)

[per-user settings]

[per-page settings]

Additional considerations 🔼

  • hide 'meta' also from @user members?
  • maybe especially restrict access to 'start' pages in core namespaces, certainly the wiki's 'start' page in the root namespace
  • restrict access to community:development
  • further restrict access to community:development:devuan-devmeetnotes?
  • restrict access to pages and namespaces kept around for keeping old links intact to read-only for everyone except who? (strict: except admin, less strict: except admin + @manager, even less strict: except admin, @manager, @editor)

Remaining questions 🔼

  • How is the "user" namespace handled by default (can @user edit...?)
  • Who shall have access to the 'wiki' namespace, admins only?
  • Who will have page move/rename permissions (depends on namespace and group membership)
  • also see the wiki todo list

Notes 🔼

  • Make access to namespaces and pages kept around for keeping links functional READ-ONLY (except for @editor and higher)