Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 670392 - Wiki lacks basic user administration capabilities
Summary: Wiki lacks basic user administration capabilities
Status: CONFIRMED
Alias: None
Product: Websites
Classification: Unclassified
Component: Wiki (show other bugs)
Hardware: All Linux
: Normal critical (vote)
Assignee: Gentoo Wiki Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-11-05 20:28 UTC by Michał Górny
Modified: 2022-06-26 11:06 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-11-05 20:28:31 UTC
Well, it's not surprise that SMW is full of completely useless bloat and at the time lacks most basic stuff that is really needed.  We've gotten a request to remove user's account from wiki and not only there's no way to do that but:

a. there's no way to find user using his e-mail address,

b. there's no way to change e-mail address of another user,

c. there's no way to change the username.

So it looks that all I can do is basically block his account from login.  Could we please either make this awful tool at least remotely usable or start seriously considering removing it for the sake of GDPR compliance?
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2018-11-16 06:07:00 UTC
@mgorny: your complaints are about core MediaWiki. It doesn't offer the functionality you seek in core MediaWiki. The SMW extensions don't touch users at all.

a) SQL to find it:
SELECT * FROM user WHERE user_email='EMAIL';

b) See below about adding some extensions to do user admin.

c) Rename user:
https://wiki.gentoo.org/wiki/Special:RenameUser
docs here:
https://www.mediawiki.org/wiki/Extension:Renameuser

There is user-merge functionality installed already:
https://wiki.gentoo.org/wiki/Special:UserMerge
docs here:
https://www.mediawiki.org/wiki/Extension:User_Merge_and_Delete


There is no general user admin functionality, we'd need to add some extension for it, e.g. this https://www.mediawiki.org/wiki/Extension:UserManager
(that's not a recommendation, just an example).
Comment 2 Brian Evans (RETIRED) gentoo-dev 2018-12-06 18:19:19 UTC
There is an extension: https://www.mediawiki.org/wiki/Extension:EditAccount.

This extension will allow the account owner as well as staff members to change the email or disable the account

In order to not break contributions, the disable function: sets the real name to "Account Disabled", removes the email address and scrambles the password

Will this satisfy the requirements?
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-12-06 19:01:20 UTC
That satisfies point b., leaving a. and c. unsolved.
Comment 4 Brian Evans (RETIRED) gentoo-dev 2018-12-06 19:51:31 UTC
(In reply to Michał Górny from comment #3)
> That satisfies point b., leaving a. and c. unsolved.

For c, the links that robbat2 mentioned do work on our wiki.

For a, I can work on a Special page which grabs the User info similarly to how the Password reset function does it.  I cannot find anything currently written to do such a task.
Comment 5 Matthew Marchese Gentoo Infrastructure gentoo-dev 2022-06-26 11:06:57 UTC
(In reply to Brian Evans from comment #4)
> (In reply to Michał Górny from comment #3)
> > That satisfies point b., leaving a. and c. unsolved.
> 
> For a, I can work on a Special page which grabs the User info similarly to
> how the Password reset function does it.  I cannot find anything currently
> written to do such a task.

@grknight, any updates on point a? It's been a while...