Restrict createaccount permission to bureaucrats (#305)

tarrow · web-flow · commit 96f1245f892c · 2023-01-12T15:16:44.000+01:00
Bug: T322665
diff --git a/dist-persist/wbstack/src/Settings/LocalSettings.php b/dist-persist/wbstack/src/Settings/LocalSettings.php
@@ -396,6 +396,9 @@ function onPersonalUrlsConfirmAccount( array &$personal_urls, Title $title, Skin
         }
         return true;
     }
+    // fix known issue for mediawiki newer than 1.35 to prevent unapproved creation
+    $wgGroupPermissions['*']['createaccount'] = false;
+    $wgGroupPermissions['bureaucrat']['createaccount'] = true;
 }
 
 # InviteSignup (only loaded when the setting is on)
diff --git a/dist/wbstack/src/Settings/LocalSettings.php b/dist/wbstack/src/Settings/LocalSettings.php
@@ -396,6 +396,9 @@ function onPersonalUrlsConfirmAccount( array &$personal_urls, Title $title, Skin
         }
         return true;
     }
+    // fix known issue for mediawiki newer than 1.35 to prevent unapproved creation
+    $wgGroupPermissions['*']['createaccount'] = false;
+    $wgGroupPermissions['bureaucrat']['createaccount'] = true;
 }
 
 # InviteSignup (only loaded when the setting is on)

Original file line number	Diff line number	Diff line change
`@@ -396,6 +396,9 @@ function onPersonalUrlsConfirmAccount( array &$personal_urls, Title $title, Skin`
`396`	`396`	`}`
`397`	`397`	`return true;`
`398`	`398`	`}`
	`399`	`+ // fix known issue for mediawiki newer than 1.35 to prevent unapproved creation`
	`400`	`+ $wgGroupPermissions['*']['createaccount'] = false;`
	`401`	`+ $wgGroupPermissions['bureaucrat']['createaccount'] = true;`
`399`	`402`	`}`
`400`	`403`
`401`	`404`	`# InviteSignup (only loaded when the setting is on)`