On Wed, Feb 24, 2010 at 11:30 PM, Dmitriy Sintsov <[email protected]> wrote: > I understand that MediaWiki is not the best (although not the worst) for > math, but speaking of fine-grained access control, what do you think of > HaloACL? > http://www.mediawiki.org/wiki/Extension:Halo_Access_Control_List > Dmitriy
I haven't looked at that. It's a user-submitted extension, so use it at your own risk. From reading the description, it's not clear whether it allows restriction of viewing -- it sounds like it only allows restriction of editing. MediaWiki is not set up to allow granular restriction of viewing, and no extension can easily allow it in a secure fashion. For information on some of the many things that can go wrong with an extension that claims to do read restrictions, see <http://www.mediawiki.org/wiki/Security_issues_with_authorization_extensions>. The *only* reliable type of read restriction in MediaWiki, with or without extensions, is when you forbid entire groups (e.g., unregistered users) from reading or editing the wiki at all. If you can edit any page, or view anything beyond a very small and carefully-selected whitelist, you can probably get some information about pages that are hidden to you. _______________________________________________ Wikitech-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikitech-l
