Help talk:User rights and groups

Mention that group "(all)" is also called "*". Jidanni (talk) 02:16, 16 November 2019 (UTC)

I am currently trying to use this with OAuth connection. The user which the OAuth belong to is an admin user. I've tested other API functions as editpage which just work but whatever I do, I always receive the response of that my "user" doesn't seem to have the rights to edit another users group. I've tried changing the OAuth permissions to all and I've noticed in identify that my OAuth connection does have the userright permission.

Testuser is a user with zero group connections.

$userEditToken = json_decode($client->makeOAuthCall($accessToken,$apiUrl . "?action=query&format=json&meta=tokens&type=userrights"))->query->tokens->userrightstoken;

$userInfo = $client->makeOAuthCall(
        $accessToken,
        $apiUrl,
        true,
        [
            "action" => "userrights",
            "format" => "json",
            "user" => "Testuser",
            "add" => "bureaucrat",
            "token" => $userEditToken,
        ]
);

The response is

string(67) "{"userrights":{"user":"Testuser","userid":5,"added":[],"removed":[]}}"

Which seems to indicate that my OAuth application doesn't have the permissions to change that user even though identify returns the permission "userrights".

Am I missing something?

Did you ever fix this problem?

At the main-page it says; "Bureaucrats – ... , giving them permission to assign/revoke user groups"

Is the "assign/revoke user groups" truly only available to Bureaucrats/Sysop?

Or to be more specific, is it potentially possible that an additional user group is setup (by Bureaucrats/Sysop) that can be assigned by an Admin to normal-rights users? (This would be something of an intermediate user group, to potentially give some regular users a bit more features. Like for example the "Mark as patrolled" right.)

Seems possible, after a bit more reading up ...

ie: (by setting something like this)

$wgAddGroups['admin'][] = 'Trustworthy';
+
$wgGroupPermissions['Trustworthy'] = $wgGroupPermissions['user'];
$wgGroupPermissions['Trustworthy']['patrol'] = true;

Correct? (never (and not currently) played around with mediawiki at sysop level.)

Help:Assigning permissions

See Help_talk:Assigning_permissions#Replace_this_page.3F