Категория:Расширения пользовательских прав
The Page specific user rights extensions category contains various extensions that attempt to restrict a user's access to specific pages based on the namespace, category links, and/or title patterns.
Before installing one of these extensions, users should be aware that such extensions are likely to exhibit three significant problems:
- caching problems: MediaWiki's page caching facilities do not currently support rights-specific caching. That means MediaWiki caches one versions of a page and then serves that page to everyone without rechecking to see if the next user has the proper rights. Any extension that tries to exclude or hide part of a page based on user rights is likely to result in performance declines (if caching is turned off) and/or security leaks when a page cached for a user with higher rights is later viewed by a user with lesser rights.
- multiple exit paths: Page content has many exit paths in MediaWiki: direct page views, excerpts inserted into search results, special pages, RSS feeds, and numerous extensions that read directly from the MediaWiki database. There is no one exit path that either the MediaWiki core or its extensions rely on. Hence it is virtually impossible for any extension to provide full security.
- system security: Content management security is inseparable from overall system security. The default MediaWiki configuration places database passwords in plain text on a file located on the same server as the MediaWiki installation. There is no attempt to secure the host web server or underlying database. If the underlying system is insecure, any extension added on top of that system is also insecure.
If you need per-page or partial page access restrictions, you are advised to install an appropriate content management package. MediaWiki was not written to provide per-page access restrictions, and almost all hacks or patches promising to add them will likely have flaws somewhere, which could lead to exposure of confidential data. We are not responsible for anything being leaked.
For further details, see Security issues with authorisation extensions |
Расширение | Состояние | Работает с кешем | Работает с группами MediaWiki | Контроль доступа основанный на странице | Контроль доступа основанный на пространстве имён | Add ACL by editing page | Добавить ACL через специальную страницу | Поддерживаемая версия MediaWiki |
---|---|---|---|---|---|---|---|---|
Расширение:Lockdown | stable | Да | Да | Нет | Да | Нет | Нет | 1.31+ |
Extension:AccessControl | stable | Да | Да | Да | Да | Да | Нет | 1.34+ |
Extension:NSFileRepo | stable | Да | Да | Нет | Да | Нет | Нет | 1.27, 1.35 |
Extension:UserProtect | beta | Да | Нет (user based) | Да | Нет | Нет | Да (page action) | 1.35 |
Extension:PageOwnership | stable | Да | Да | Да | Да | Нет | Да | 1.35+ |
Extension:PagePermissions | stable | Да | Нет (user based) | Да | Нет | Нет | Да (page action) | 1.38+ |
Extension:Semantic ACL | beta | Нет | Да | Да | Нет | Да | Нет | 1.38+ |
Расширение | Состояние | Работает с кешем | Работает с группами MediaWiki | Контроль доступа по странице | Контроль доступа по пространству имен | Добавить ACL редактированием страницы | Добавить ACL через специальную страницу | Поддерживаемая версия MediaWiki |
Расширение | Handles transclusion | Handles preview | Handles raw | Handles search | Handles export | Handles rss/atom | Handles recent changes |
---|---|---|---|---|---|---|---|
Расширение:Lockdown | $wgNonincludableNamespaces | $wgNonincludableNamespaces | Да | partial (title listed, but no content) | Да | partial (title listed, but no content) | partial (title listed, but no content) |
Extension:NSFileRepo | $wgNonincludableNamespaces | $wgNonincludableNamespaces | Да | partial (title listed, but no content) | Да | partial (title listed, but no content) | partial (title listed, but no content) |
Extension:UserProtect (doesn't block read) | Нет | Нет | Нет | Нет | Нет | Нет | Нет |
Extension:PageOwnership | Да | ? | ? | partial (title listed, but no content) | Да | ? | RecentChanges special page can be forbidden |
Extension:Semantic ACL | Да | Да | Да | Да | Да | ? | Нет |
Расширение | Handles transclusion | Handles preview | Handles raw | Handles search | Handles export | Handles rss/atom | Handles recent changes |
См. также
Pages in category "Категория:Расширения пользовательских прав"
The following 5 pages are in this category, out of 5 total.