Granting editprotected permission to a user group

Configuration/Setup
1

We are using BlueSpice Free 4.4.2 on MediaWiki 1.39.6

I want to assign the editprotected permission to a Group other than admin. Specifically I want to assign it to the interface-admin Group.

The objective is to allow users to edit MediaWiki/Sidebar WITHOUT having to make them admins

I have added the following to LocalSettings.php:

$wgGroupPermissions[‘interface-admin’][‘editprotected’] = true;

However when I review the permissions for the group, it has none. I think BlueSpice may be overwriting this delegation of permissions.

I can’t use the Custom option when setting up the wiki in the Permissions Manager because Custom is not supported for Free installations.

Please advise.

RyanD

2

Hello RyanD,

the $wgGroupPermission variable is no longer used.
You could try the following:

Permisson “editprotected” for roles “interface-admin” and “maintenanceadmin”:

$bsgPermissionConfig[ 'editprotected' ] = [
    'roles' => [
        "interface-admin",
        "maintenanceadmin"
    ]
];

Best regards

3

Thanks for the tip Monique,

I added this to LocalSettings.php but it did not work.

I have a test account that is configured to have the “interface administrator” group turned on (set to “Does Not Expire”).

When logged in as this user I cannot edit the MediaWiki:Sidebar page.

When logged in as an administrator I can.

4

Hi,

did you set the $bsgPermissionConfig at the end of LocalSettings.php? it can make a difference if it’s loaded at the beginning or at the end of LocalSettings.

settings at the end of LocalSettings are never overwritten by other parts of the wiki

I’ve also noticed that according to Manual:Interface/Sidebar - MediaWiki you need also the permission " editinterface"

5

I ensured that the code block was the very last thing in the file, still doesn’t work.

6

I also confirmed that my test user has the roles:
bureaucrat
editor
interface-admin

7

Hello,
to make sure that a user in group interface-admin have the right editinterface, you need to grant role admin, maintenanceadmin or structuremanager to group interface-admin:
visit Special:PermissionManager, show system groups, choose interface-admin group and grant e.g maintenanceadmin role of all wiki pages to the group. Then you should be able to edit MediaWiki:Sidebar with your wanted account.

8

Using the Free version of BlueSpice, the Special:PermissionManager page does not have the ad hoc Custom Setup option. I am unable to take any action on that page other than selecting one of the three predefined Permission options.

9

Hello,
to evaluate the group/role system one can check the configurations mentioned in the extension’s documentation Reference:BlueSpicePermissionManager - BlueSpice Helpdesk, find the configurations to adjust in /<path-to>/w/settings.d/ and apply wanted changes.