Manual:$wgGrantRiskGroups

User rights, access control and monitoring: $wgGrantRiskGroups
Group grants by risk level.
Introduced in version:	1.42.0 (Gerrit change 910822; git #183372c9)
Removed in version:	still in use
Allowed values:	(array)
Default value:	See below
Other settings: Alphabetical | By function

Details

Group grants by risk level. Keys are grant names (i.e. keys from $wgGrantPermissions ), values are GrantsInfo::RISK_* constants.

This classification is only informative; merely applying 'security' or 'internal' to a grant won't prevent it from being available. It's used to give guidance to users in various interfaces about the riskiness of the various grants.

Default value

$wgGrantRiskGroups = [
	'basic' => 'low',
	'editpage' => 'low',
	'createeditmovepage' => 'low',
	'editprotected' => 'vandalism',
	'patrol' => 'low',
	'uploadfile' => 'low',
	'uploadeditmovefile' => 'low',
	'sendemail' => 'security',
	'viewmywatchlist' => 'low',
	'editviewmywatchlist' => 'low',
	'editmycssjs' => 'security',
	'editmyoptions' => 'security',
	'editinterface' => 'vandalism',
	'editsiteconfig' => 'security',
	'rollback' => 'low',
	'blockusers' => 'vandalism',
	'delete' => 'vandalism',
	'viewdeleted' => 'vandalism',
	'viewrestrictedlogs' => 'security',
	'protect' => 'vandalism',
	'oversight' => 'security',
	'createaccount' => 'low',
	'mergehistory' => 'vandalism',
	'import' => 'security',
	'highvolume' => 'low',
	'privateinfo' => 'low',
];