Echoes of the Flesh:Access levels: Difference between revisions
From Echoes of the Flesh
More actions
Content deleted Content added
DivošiRunner (talk | contribs) Document private Gatekeep workspace and create harmless access-test placeholders |
DivošiRunner (talk | contribs) Document private Gatekeep workspace and create harmless access-test placeholders |
||
| Line 1: | Line 1: | ||
<!-- Keep this a concise permissions reference. Put implementation/audit notes in host reports. Preserve role-link anchors. --> |
|||
This page summarizes how access works on the [https://sarkic-cults.group Sarkic Cults Wiki]. For the exact live rights list, see [[Special:ListGroupRights]]. |
|||
<span id="Unregistered_members"></span>Most of the wiki is publicly readable. '''Gatekeep and its talk namespace are private.''' Editing depends on your groups, the namespace and any page protection. [[Special:ListGroupRights|View the complete permissions list]]. |
|||
== |
== Roles == |
||
Moderator includes verified permissions; maintainer includes moderator permissions; sysop includes maintainer permissions. Other groups are separate, and their rights combine with your existing groups. |
|||
The public areas of the wiki are readable by everyone. The Gatekeep workspace is restricted to the <code>gatekeep</code> and <code>sysop</code> groups. Editing is split by role, by namespace protection, and in some cases by page-level protection. |
|||
{| class="wikitable" |
|||
=== Public reading === |
|||
! Role !! Main permissions |
|||
Everyone, including visitors who are not logged in, can read the public namespaces and [[Special:CreateAccount|create an account]]. This does not include <code>Gatekeep:</code> or <code>Gatekeep_talk:</code>. |
|||
|- |
|||
! <span id="Registered_members"></span>Registered member |
|||
| Create/edit public talk pages and edit existing unprotected user pages, including your own CSS/JS/JSON. No article editing, regular page creation, uploads or moves. |
|||
|- |
|||
! <span id="Verified_members"></span>Verified member |
|||
| Edit public content, create pages, upload/reupload local files and move pages/files. |
|||
|- |
|||
! <span id="Moderators"></span>Moderator |
|||
| Patrol edits, roll back changes and assign contributor/namespace groups. |
|||
|- |
|||
! <span id="Maintainers"></span>Maintainer |
|||
| Protect pages, block users, maintain templates/forms and use advanced maintenance tools. |
|||
|- |
|||
! <span id="Administrators_(sysop)"></span>Administrator (<code>sysop</code>) |
|||
| Site administration, including deletion and Gatekeep access. Site CSS/JS still requires interface-admin. |
|||
|- |
|||
! <span id="Interface_administrators"></span>Interface administrator |
|||
| Edit interface messages, Lua modules, site CSS/JS/JSON and other users’ CSS/JS/JSON. |
|||
|- |
|||
! <span id="Bureaucrats"></span>Bureaucrat |
|||
| Manage all user groups. This group alone does not grant Gatekeep access. |
|||
|- |
|||
! <span id="Bots"></span>Bot |
|||
| Automation privileges and higher API limits. Content editing, uploads and private access need the relevant additional groups. |
|||
|} |
|||
== Namespace access == |
|||
=== Discussion and personal space === |
|||
Public talk pages generally allow registered editors. The table covers the named content namespaces; '''both Gatekeep namespaces are restricted'''. |
|||
Logged-in users can create and edit talk pages, manage their account settings and maintain watchlists. They can edit existing unprotected personal-space pages, including their own existing CSS/JS/JSON subpages. Creating a new non-talk page still requires the separate page-creation right, normally supplied by verified membership or a staff role. |
|||
{| class="wikitable" |
|||
=== Content namespaces === |
|||
! Namespace !! Who can edit |
|||
The main content areas of the wiki require the <code>content-edit</code> right. In practice, this means [[#Verified members|verified members]] and above can edit most wiki content, while ordinary registered accounts cannot. |
|||
|- |
|||
! Main, Project, File, Help, Category |
|||
| Verified members, moderators, maintainers and sysops. |
|||
|- |
|||
! <span id="Solomonari"></span>Solomonari |
|||
| The <code>solomonari</code> group, maintainers or sysops. |
|||
|- |
|||
! <span id="CotRH"></span>CotRH |
|||
| The <code>cotrh</code> group, maintainers or sysops. |
|||
|- |
|||
! Template, Form |
|||
| Maintainers or sysops. |
|||
|- |
|||
! Module, MediaWiki |
|||
| Interface administrators or sysops. Site CSS/JS also needs interface-admin. |
|||
|- |
|||
! Gatekeep, Gatekeep_talk |
|||
| Only <code>gatekeep</code> members or sysops can '''read, create and edit''' here. |
|||
|} |
|||
'''Creating pages:''' new non-talk pages require page-creation permission, provided by verified, moderator, maintainer or sysop. Solomonari and CotRH flags alone allow editing existing pages, not creating new ones. Gatekeep grants creation in its workspace. |
|||
Protected content areas currently include: |
|||
* Main namespace |
|||
* Project namespace |
|||
* File namespace |
|||
* Help namespace |
|||
* Category namespace |
|||
'''HR protection:''' <span id="Solomonari_HR"></span><span id="CotRH_HR"></span><code>solomonari_hr</code> and <code>cotrh_hr</code> unlock individually protected pages. Editing those pages in the matching namespace needs '''both the base and HR flag''', or maintainer/sysop permissions. HR protection does not make pages private. |
|||
=== Special protected areas === |
|||
Some parts of the wiki use higher trust levels: |
|||
* Template and Form pages require the <code>template-edit</code> right. |
|||
* MediaWiki interface messages and Lua Module pages require <code>editinterface</code> (normally interface administrators or sysops). |
|||
* Site CSS/JS/JSON additionally require the corresponding site-code right. Sysop alone can edit ordinary interface messages and site JSON, but does not grant site CSS/JS editing on this wiki; interface-admin supplies those rights. |
|||
* Editing your own existing personal CSS/JS/JSON uses the corresponding own-user-code right. Editing another user’s CSS/JS/JSON requires the corresponding other-user-code right; <code>editinterface</code> alone is not sufficient. |
|||
* The custom Solomonari namespace requires the <code>solomonari</code> right. |
|||
* The custom CotRH namespace requires the <code>cotrh</code> right. |
|||
* Some individually protected pages may also require the <code>solomonari_hr</code> or <code>cotrh_hr</code> rights. |
|||
== |
== Gatekeep == |
||
The private workspace is for lore drafts and work in progress. Only <code>gatekeep</code> and <code>sysop</code> can read it; other roles do not automatically grant access. |
|||
=== Unregistered members === |
|||
Unregistered visitors can read the public namespaces and create an account. They cannot edit pages or upload files. |
|||
* Create drafts as <code>Gatekeep:Your draft</code>; use <code>Gatekeep_talk:</code> for discussion. |
|||
=== Registered members === |
|||
* Use the standard wiki editor. Page Forms and private-page preloads are unavailable. To search drafts, select the Gatekeep namespace. |
|||
Registered members can: |
|||
* Private pages cannot be included in other pages. Cargo exports and Discord activity messages are disabled. |
|||
* Create and edit talk pages, and edit existing unprotected discussion/personal-space pages |
|||
* '''Titles, authors, timestamps and edit summaries may remain public. Uploaded files remain public.''' Keep sensitive details out of this metadata. Categories do not make pages private; moving previously public material cannot recall published copies. |
|||
* Mark minor edits |
|||
* Manage preferences, private account information, and watchlists |
|||
* Edit their own existing user CSS, JS, and JSON pages (new non-talk pages still require page-creation permission) |
|||
* Send email through the wiki when enabled |
|||
== Assigning groups == |
|||
Registered members cannot: |
|||
Authorized staff manage membership through [[Special:UserRights]]. |
|||
* Edit protected content namespaces |
|||
* Create regular content pages |
|||
* Upload or reupload files |
|||
* Move pages or files |
|||
{| class="wikitable" |
|||
=== Verified members === |
|||
! Group manager !! Can grant or remove |
|||
Verified members are trusted contributors who have been approved by staff. They can: |
|||
|- |
|||
* Edit the normally protected Main, Project, File, Help and Category namespaces; individually protected pages can require additional rights |
|||
! Moderator |
|||
* Create content pages |
|||
| Verified, Solomonari, CotRH and their HR groups. |
|||
* Upload and reupload local files |
|||
|- |
|||
* Move pages and files |
|||
! Maintainer |
|||
* Edit semiprotected pages |
|||
| The moderator’s list, plus moderator. |
|||
* Purge pages |
|||
|- |
|||
! Solomonari_HR / CotRH_HR |
|||
| The matching base group: solomonari / cotrh. |
|||
|- |
|||
! Sysop |
|||
| Gatekeep. |
|||
|- |
|||
! Bureaucrat |
|||
| All groups. |
|||
|} |
|||
== Protection and security == |
|||
This is the normal contributor role for members who are actively helping with the wiki. |
|||
Page protection and account blocks can restrict editing further. The Main Page has cascading protection: it needs maintainer/sysop permissions, and included pages may inherit that protection. |
|||
Two-factor authentication is configured as required for moderator, maintainer, interface-admin and sysop. For access problems, check your groups and the page’s protection, then ask staff through {{Discord|Discord}}. |
|||
=== Solomonari === |
|||
Solomonari is a separate access flag for editing existing pages in the custom Solomonari namespace. It does not automatically grant verified, upload or new-page creation rights. Creating a new Solomonari page normally needs verified (or an equivalent staff role) as well as the namespace flag. |
|||
[[Help:Editing guide|Editing guide]] · [[Echoes of the Flesh:Templates|Template guide]] · [[Special:ListGroupRights|Live group rights]] |
|||
=== CotRH === |
|||
CotRH is a separate access flag for editing existing pages in the custom CotRH namespace. It does not automatically grant verified, upload or new-page creation rights. Creating a new CotRH page normally needs verified (or an equivalent staff role) as well as the namespace flag. |
|||
=== Solomonari_HR === |
|||
Solomonari_HR is a separate page-protection access flag. It is intended for individually protected high-restriction pages and does not, by itself, grant the normal contributor or staff permissions ladder. The HR flag does not include the base namespace flag; editing an HR-protected Solomonari page requires both. It can grant and remove the <code>solomonari</code> group. |
|||
=== CotRH_HR === |
|||
CotRH_HR is a separate page-protection access flag. It is intended for individually protected high-restriction pages and does not, by itself, grant the normal contributor or staff permissions ladder. The HR flag does not include the base namespace flag; editing an HR-protected CotRH page requires both. It can grant and remove the <code>cotrh</code> group. |
|||
=== Gatekeep === |
|||
The <code>gatekeep</code> group gives access to the private lore workspace: |
|||
* <code>Gatekeep:</code> (namespace 3004): lore dumps, work-in-progress concepts and private drafts. |
|||
* <code>Gatekeep_talk:</code> (namespace 3005): discussions about those drafts. |
|||
Only members of <code>gatekeep</code> or <code>sysop</code> can read pages in either namespace. Verified, moderator, maintainer, interface-admin, bureaucrat and bot membership do not independently give read access. Groups combine: someone who is also a gatekeep member can read them. |
|||
Gatekeep members can create and edit pages in both namespaces using the <code>gatekeep-edit</code> right. The group does not grant public content-editing, uploads or staff tools. Ordinary page protection and account blocks still apply. Moving pages within the workspace follows existing move permissions; moving a private page into a public namespace requires sysop. |
|||
Sysops can grant and remove the <code>gatekeep</code> group through [[Special:UserRights]]. Bureaucrats retain their existing unrestricted group-management right and can also assign it. Editorial roles are not delegated management of this group. No one is automatically added to gatekeep. |
|||
==== Workspace boundaries ==== |
|||
Use the standard wiki editor for Gatekeep pages. Page Forms editing and private-page preloads are unavailable in this workspace. |
|||
Use the namespace prefix when creating a private page, for example <code>Gatekeep:Your draft</code>. The corresponding talk namespace accepts <code>Gatekeep_talk:</code> (displayed as “Gatekeep talk”). Private pages cannot be transcluded, substituted or read with Lua title-content helpers, including by authorized editors; this prevents their text being included in public pages or parser caches. Public Cargo data storage and Discord activity messages are disabled for these namespaces. Authorized members can search the workspace by selecting its namespace; it is excluded from the default search. |
|||
The restriction protects page content, including normal source, history/diff and API reads. It does not make page titles, authors, timestamps or edit summaries secret: they can still appear in public wiki listings and logs. Keep sensitive information out of titles and summaries. Categories are organizational tools, not privacy boundaries. Uploaded files remain in the public File namespace; linking one from Gatekeep does not make the file private. Moving previously public material here cannot withdraw copies already published elsewhere. |
|||
[[Gatekeep:TEST]] and [[Gatekeep_talk:TEST]] contain harmless placeholder text for access checks. Server-side maintenance created these as DivošiRunner without adding the account to gatekeep. |
|||
=== Moderators === |
|||
Moderators have all verified member permissions, plus day-to-day workflow and trust-management tools. They can: |
|||
* Patrol and autopatrol edits |
|||
* Roll back vandalism or bad edits |
|||
* Suppress redirects when moving pages |
|||
* Bypass CAPTCHA where needed |
|||
* Manage certain user group assignments |
|||
* Grant and remove the <code>verified</code>, <code>solomonari</code>, <code>solomonari_hr</code>, <code>cotrh</code>, and <code>cotrh_hr</code> groups |
|||
Flow is disabled following the upgrade. Retained Flow-named rights do not make Structured Discussions available. |
|||
Moderators are intended to handle routine content review and contributor verification, not heavy administrative maintenance. |
|||
=== Maintainers === |
|||
Maintainers have all moderator permissions, plus broader maintenance and administrative tooling. They can: |
|||
* Protect pages and edit protected pages |
|||
* Edit templates and forms |
|||
* Edit restricted fields and selected advanced content models |
|||
* Block users |
|||
* Upload by URL and reupload shared files |
|||
* Run Cargo queries and rebuild Cargo data |
|||
* View AbuseFilter logs available to this role |
|||
* Use selected advanced extension maintenance tools |
|||
* Grant and remove the <code>moderator</code> group in addition to <code>verified</code>, <code>solomonari</code>, <code>solomonari_hr</code>, <code>cotrh</code>, and <code>cotrh_hr</code> |
|||
Maintainers are the main high-trust content and operations role on this wiki. TemplateStyles in the Template namespace follow template permissions. Maintainer alone does not permit editing Lua modules or MediaWiki interface messages; those need an interface-administration role. Individual page protection and extension-specific requirements still apply. |
|||
=== Interface administrators === |
|||
Interface administrators can edit site interface content, including MediaWiki pages and site/user CSS, JS, and JSON. This role is restricted because interface pages can affect the whole wiki. |
|||
=== Administrators (sysop) === |
|||
Administrators have broad site administration permissions, including deletion, blocking, protection and the custom namespace rights. Sysop is the general administration role; site CSS/JS and other users’ CSS/JS still require interface-admin. Sysop alone does not grant unrestricted user-group management; it is delegated grant/removal of the gatekeep group and can read/edit the Gatekeep workspace. |
|||
=== Bureaucrats === |
|||
Bureaucrats have unrestricted <code>userrights</code> under the current configuration. This allows management of all available local groups, not only the groups below. The configured delegation list is therefore not a restriction while that right is granted. Its listed operational groups are: |
|||
* verified |
|||
* solomonari |
|||
* solomonari_hr |
|||
* cotrh |
|||
* cotrh_hr |
|||
* moderator |
|||
* maintainer |
|||
* interface-admin |
|||
* sysop |
|||
* gatekeep |
|||
=== Bots === |
|||
Bots are automated or semi-automated accounts with raised API limits, bot marking and selected automation exemptions. Bot membership alone does not grant content-editing, upload, template, module or custom-namespace access. A bot needs the relevant contributor/namespace/staff groups for ordinary API or web edits. The bot role is assigned manually. Official server-side maintenance tools may use an explicitly selected revision author without granting that account additional web/API rights. |
|||
== Page protection and account security == |
|||
Group rights combine; membership in one role does not remove rights granted by another. Namespace restrictions, individual page protection and account blocks are checked in addition to the role’s rights. The Main Page currently has cascading sysop-level edit protection, so verified or moderator membership alone cannot edit it; maintainers/sysops have the required protected-page rights. Pages transcluded there may inherit its protection. |
|||
Two-factor authentication is configured as required for moderator, maintainer, interface-admin and sysop groups. Bureaucrat alone is not in that required-group list; however, all current bureaucrat accounts also belong to a listed group. Enrolment and login enforcement are separate from this permissions reference; this page does not certify an individual account’s authentication setup. |
|||
For access problems, check your [[Special:Preferences|preferences]] and group membership, the namespace and the page’s protection. Ask through {{Discord|Discord}} or use the talk page to request an edit. Do not share passwords, bot passwords or authentication codes. |
|||
== Legacy role names == |
|||
The former Editor and Trusted page links now lead to the Verified contributor guidance. They are navigation aliases; they do not create, rename or assign user groups. |
|||
== Practical summary == |
|||
* Want to read public wiki content: no account needed. |
|||
* Want to read or work on private Gatekeep drafts: you need <code>gatekeep</code> or <code>sysop</code>. |
|||
* Want to discuss or maintain existing personal pages/account settings: a normal registered account is enough; new non-talk pages need page-creation permission. |
|||
* Want to edit articles, files, and core content: you need the verified group. |
|||
* Want access to the Solomonari namespace: you need the <code>solomonari</code> group. |
|||
* Want access to the CotRH namespace: you need the <code>cotrh</code> group. |
|||
* Want access to HR-protected pages: you need both the matching base namespace flag and <code>solomonari_hr</code> or <code>cotrh_hr</code> flag. |
|||
* Want to moderate contributors and review content workflow: moderator. |
|||
* Want to maintain templates, forms, and higher-trust wiki operations: maintainer. |
|||
* Want to edit Lua modules or ordinary interface messages: the required interface-editing role. |
|||
* Want to edit sitewide CSS/JS: interface administrator. |
|||
See [[Help:Editing guide]] for editing steps and [[Echoes of the Flesh:Templates]] for using existing templates. This documentation describes the configuration checked on 5 October 2026; [[Special:ListGroupRights]] is the live rights reference. |
|||
[[Category:Policies]] |
[[Category:Policies]] |
||
Latest revision as of 19:23, 5 October 2026
Most of the wiki is publicly readable. Gatekeep and its talk namespace are private. Editing depends on your groups, the namespace and any page protection. View the complete permissions list.
Roles
Moderator includes verified permissions; maintainer includes moderator permissions; sysop includes maintainer permissions. Other groups are separate, and their rights combine with your existing groups.
| Role | Main permissions |
|---|---|
| Registered member | Create/edit public talk pages and edit existing unprotected user pages, including your own CSS/JS/JSON. No article editing, regular page creation, uploads or moves. |
| Verified member | Edit public content, create pages, upload/reupload local files and move pages/files. |
| Moderator | Patrol edits, roll back changes and assign contributor/namespace groups. |
| Maintainer | Protect pages, block users, maintain templates/forms and use advanced maintenance tools. |
Administrator (sysop)
|
Site administration, including deletion and Gatekeep access. Site CSS/JS still requires interface-admin. |
| Interface administrator | Edit interface messages, Lua modules, site CSS/JS/JSON and other users’ CSS/JS/JSON. |
| Bureaucrat | Manage all user groups. This group alone does not grant Gatekeep access. |
| Bot | Automation privileges and higher API limits. Content editing, uploads and private access need the relevant additional groups. |
Namespace access
Public talk pages generally allow registered editors. The table covers the named content namespaces; both Gatekeep namespaces are restricted.
| Namespace | Who can edit |
|---|---|
| Main, Project, File, Help, Category | Verified members, moderators, maintainers and sysops. |
| Solomonari | The solomonari group, maintainers or sysops.
|
| CotRH | The cotrh group, maintainers or sysops.
|
| Template, Form | Maintainers or sysops. |
| Module, MediaWiki | Interface administrators or sysops. Site CSS/JS also needs interface-admin. |
| Gatekeep, Gatekeep_talk | Only gatekeep members or sysops can read, create and edit here.
|
Creating pages: new non-talk pages require page-creation permission, provided by verified, moderator, maintainer or sysop. Solomonari and CotRH flags alone allow editing existing pages, not creating new ones. Gatekeep grants creation in its workspace.
HR protection: solomonari_hr and cotrh_hr unlock individually protected pages. Editing those pages in the matching namespace needs both the base and HR flag, or maintainer/sysop permissions. HR protection does not make pages private.
Gatekeep
The private workspace is for lore drafts and work in progress. Only gatekeep and sysop can read it; other roles do not automatically grant access.
- Create drafts as
Gatekeep:Your draft; useGatekeep_talk:for discussion. - Use the standard wiki editor. Page Forms and private-page preloads are unavailable. To search drafts, select the Gatekeep namespace.
- Private pages cannot be included in other pages. Cargo exports and Discord activity messages are disabled.
- Titles, authors, timestamps and edit summaries may remain public. Uploaded files remain public. Keep sensitive details out of this metadata. Categories do not make pages private; moving previously public material cannot recall published copies.
Assigning groups
Authorized staff manage membership through Special:UserRights.
| Group manager | Can grant or remove |
|---|---|
| Moderator | Verified, Solomonari, CotRH and their HR groups. |
| Maintainer | The moderator’s list, plus moderator. |
| Solomonari_HR / CotRH_HR | The matching base group: solomonari / cotrh. |
| Sysop | Gatekeep. |
| Bureaucrat | All groups. |
Protection and security
Page protection and account blocks can restrict editing further. The Main Page has cascading protection: it needs maintainer/sysop permissions, and included pages may inherit that protection.
Two-factor authentication is configured as required for moderator, maintainer, interface-admin and sysop. For access problems, check your groups and the page’s protection, then ask staff through Discord.