Last modified: 2011-01-25 01:22:15 UTC

Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.
Bug 15030 - List global group rights similar to Special:ListGroupRights
List global group rights similar to Special:ListGroupRights
Product: MediaWiki extensions
Classification: Unclassified
CentralAuth (Other open bugs)
All All
: Normal enhancement with 9 votes (vote)
: ---
Assigned To: Andrew Garrett
Depends on: 15252
  Show dependency treegraph
Reported: 2008-08-04 02:13 UTC by Mike.lifeguard
Modified: 2011-01-25 01:22 UTC (History)
7 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Description Mike.lifeguard 2008-08-04 02:13:16 UTC
GroupPermissionsManager should have a list of global groups' rights similar to the local groups rights list at Special:ListGroupRights; perhaps call it Special:ListGlobalGroupRights.
Comment 1 Siebrand Mazeland 2008-08-10 23:51:02 UTC
Component: CentralAuth
Comment 2 Andrew Garrett 2008-08-24 03:08:51 UTC
This will come with some rights-management stuff I'm working on currently.
Comment 3 Andrew Garrett 2008-09-06 08:35:42 UTC
Reassigning to me.
Comment 4 Cometstyles 2008-09-07 02:16:20 UTC
I made this > . Could be useful :)
Comment 5 Andrew Garrett 2008-10-06 09:17:32 UTC
Marking dependency on the committing of that patch.
Comment 6 Andrew Garrett 2009-02-19 19:26:51 UTC
Done in r47507, with a different patch, of course.
Comment 7 Happy-melon 2009-02-22 14:14:55 UTC
This doesn't work for me, either on meta or; I get "You are not allowed to execute the action you have requested".  

I think that the more original method suggested is superior anyway; 'overloading' this interface to provide information as well as control is both complicated (need loads of new security checks) and confusing given that it has a different layout to that for local groups.  We want to be working towards greater integration between local and global rights, not less. 
Comment 8 Andrew Garrett 2009-02-24 12:42:38 UTC
Fixed *on subversion*. It will be deployed next time there is a general code update.
Comment 9 Happy-melon 2009-02-24 13:19:17 UTC
<facepalm/> Sorry, I misread the diff number.  A test wiki that always runs SVN head would be invaluable for checking these things; although there are obviously security considerations (couldn't be directly linked to the Wikimedia CentralAuth network, for instance, which would admittedly make patches like this harder to check).  

What are your thoughts on a [[Special:ListGlobalGroupRights]] page in an identical format to [[Special:ListGroupRights]], however? I maintain that this is a preferable system, encouraging closer integration between local and global groups which is AFAIK the way we're heading. 
Comment 10 Andrew Garrett 2009-02-24 13:25:00 UTC
Sounds redundant to what was just implemented -- it makes sense to repurpose the same interface to change and view the same thing -- we don't use a separate interface for editing and for viewing the source of a page.

The patch that I wrote last year seemed to work okay for the integration you suggested, but is too big for the features it provides, and therefore hasn't been, and is unlikely to be reviewed and merged into HEAD.

I would prefer that we changed ListGroupRights to be a change *and* view interface for local group rights, rather than add an additional read-only interface for global rights.
Comment 11 Happy-melon 2009-02-24 14:01:41 UTC
I agree it's redundant; my question is which is the preferable solution.  I like the principle of your epic patch in bug15252 but, as you say, it's probably too big to ever be properly reviewed.  However, regardless of when/whether that is likely to be implemented, the two systems are *still* not synchronised.  I'm more interested in a consistent interface for viewing and/or editing group permissions, than on what precisely that interface is.  There are currently a number of inconsistencies:

1) Name: [[Special:ListGroupRights]] vs [[Special:GlobalGroupPermissions]].  I'd argue that the name of the former is actually disingenuous: by our usual convention, "rights"<=>"groups" rather than "rights"<=>"permissions", IMO.  Would a rename to [[Special:GroupPermissions]] be sensible? It *shouldn't* be a breaking change, since all potentially-breakable bots/scripts should certainly be using the API functionality (which is actually older).  Naturally we make a special page redirect from ListGroupRights.

2) UI layout: I can't really visualise how the interface will look without being able to compare the source to a running version, but I can tell that it's not the same as ListGroupRights.  It would be a Good Thing for the display to be consistent.  

Note You need to log in before you can comment on or make changes to this bug.