From 8b72732cd79ec76f34a560cfd9f1d526d7a7ce7e Mon Sep 17 00:00:00 2001 From: Grant Slater Date: Sat, 20 Dec 2014 21:22:40 +0000 Subject: [PATCH] Limiting account creation on osmf wiki --- cookbooks/foundation/recipes/wiki.rb | 1 + cookbooks/mediawiki/definitions/mediawiki_site.rb | 1 + cookbooks/mediawiki/templates/default/LocalSettings.php.erb | 6 ++++++ 3 files changed, 8 insertions(+) diff --git a/cookbooks/foundation/recipes/wiki.rb b/cookbooks/foundation/recipes/wiki.rb index d732df807..f5347ee42 100644 --- a/cookbooks/foundation/recipes/wiki.rb +++ b/cookbooks/foundation/recipes/wiki.rb @@ -32,6 +32,7 @@ mediawiki_site "wiki.osmfoundation.org" do email_contact "webmaster@openstreetmap.org" email_sender "webmaster@openstreetmap.org" email_sender_name "OSMF Wiki" + private_accounts true end cookbook_file "/srv/wiki.osmfoundation.org/Wiki.png" do diff --git a/cookbooks/mediawiki/definitions/mediawiki_site.rb b/cookbooks/mediawiki/definitions/mediawiki_site.rb index e74c3ca26..3e427b249 100644 --- a/cookbooks/mediawiki/definitions/mediawiki_site.rb +++ b/cookbooks/mediawiki/definitions/mediawiki_site.rb @@ -54,6 +54,7 @@ define :mediawiki_site, :action => [ :create, :enable ] do :site_admin_user => "Admin", :site_admin_pw => params[:admin_password], :enable_ssl => params[:enable_ssl] || FALSE, + :private_accounts => params[:private_accounts] || FALSE, :private => params[:private] || FALSE } diff --git a/cookbooks/mediawiki/templates/default/LocalSettings.php.erb b/cookbooks/mediawiki/templates/default/LocalSettings.php.erb index d03b78cf9..9f6ecb217 100644 --- a/cookbooks/mediawiki/templates/default/LocalSettings.php.erb +++ b/cookbooks/mediawiki/templates/default/LocalSettings.php.erb @@ -167,6 +167,12 @@ $wgGroupPermissions['bureaucrat']['deletelogentry'] = true; $wgGroupPermissions['bureaucrat']['deleterevision'] = true; $wgGroupPermissions['bureaucrat']['suppressrevision'] = true; $wgGroupPermissions['bureaucrat']['suppressionlog'] = true; + +<% if @mediawiki[:private_accounts] -%> +#Prevent new user registrations except by existing users +$wgGroupPermissions['*']['createaccount'] = false; +$wgGroupPermissions['user']['createaccount'] = true; +<% end -%> <% if @mediawiki[:private] -%> #Disable reading by anonymous users -- 2.43.2