On Thu, Jul 21, 2011 at 11:14 AM, Casey Brown <[email protected]> wrote:
> Just a note that I think our stance on per-page access restrictions
> has always been: "Do this at your own risk. This is not supported and
> will probably never be. We suggest you use another piece of software
> if you really need this." MediaWiki really isn't designed to be a
> content management system with very granular access settings, which is
> why we don't officially support it.

I don't want to derail this thread, but I will say this:

Even though this is what people say in #mediawiki, I know many
respected developers who don't share this approach, especially the
"will probably never be supported" part. The security issues are
well-known and in some extensions worked around — regardless, having
an understanding of what parts of code read page text contributes to
our overall code quality and security, and is definitely a worthwhile
enterprise.

-- 
Andrew Garrett
Wikimedia Foundation
[email protected]

_______________________________________________
Wikitech-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to