Help:Permissions: Difference between revisions

add
No edit summary
 
(49 intermediate revisions by the same user not shown)
Line 1: Line 1:
This wiki has a variety of account permissions that have been created to assist in it's administration.
{{Ambox|image=[[File:Authenticator.jpg|40px|link=]]|text=[[wikipedia:Multi-factor authentication|'''Multi-factor authentication''']] is required by the software to make use of any permission listed on this page.}}
 
This wiki has different account permissions to assist in it's administration. Any person with an account may request any permission. Granting of permissions is at EDC leadership and bureaucrat discretion.


== Bureaucrat ==
== Bureaucrat ==
The only people capable of granting and revoking any permissions listed below are '''bureaucrats'''. Such individuals may grant and revoke at their sole discretion. This permission is strictly controlled, not due to a lack of trust, but due to a lack of need for many people to have it. A bureaucrat account being compromised could cause substantial damage which may not be reversible, and so limited granting is also in the interest of site security. While anyone is permitted to ask to become a bureaucrat, odds are greater than normal that it'll be denied.
A '''bureaucrat''' can tie IP addresses to wiki accounts and vice versa, delete material on the wiki in such a manner to where even ''administrators'' cannot see it, and can grant and revoke any permission listed on this page.  


The following individuals in the Endurance Coalition are bureaucrats.
The following individuals in the Endurance Coalition are bureaucrats.
Line 9: Line 11:


== Administrator ==
== Administrator ==
An '''administrator''' is a functional janitor for the wiki. They are able to block user accounts (which restrict all editing and usage of any advanced permissions), protect pages from editing (and subsequently edit any protected page<ref>Not ''strictly'' true. Certain pages are protected by an [[Special:AbuseFilter|abuse filter]] and interface pages require being an interface administrator to edit.</ref>),  and are able to delete and restore pages. This makes it considerably easier to control the wiki's organization than a regular user is capable of doing.  
{{Ambox|type=delete|image=[[File:Icons8 flat privacy.svg|50px|link=]]|text=Administrators are to use their revision deletion tools to remove unwanted information from being public. If there is '''personally identifiable information''', a bureaucrat ''must'' be notified even after deletion. If there is any doubt if it's identifiable, default to notifying a bureaucrat anyway. If the administrator is confused on how to delete revisions properly, they should '''just delete the page itself'''. A bureaucrat will restore and delete the revisions properly later.}}
 
: ''List of administrators available [[Special:ListUsers/sysop|here]]''.
 
An '''administrator''' is a janitor. They are able to block user accounts (which restrict all editing and use of advanced permissions), protect pages from editing (and thus edit any protected page<ref>Not ''strictly'' true. Certain pages are protected by an [[Special:AbuseFilter|abuse filter]] and interface pages require being an interface administrator to edit.</ref>),  and are able to delete pages and revisions. This makes it much easier to control the wiki's organization.
 
Usage of the above tools are at administrator discretion (with an expectation of working nicely with others). The actual use of the tools are explained at [[mw:Manual:Administrators|Manual:Administrators]].<ref>The linked page makes assumptions about the permissions administrators have. Some permissions may not be available on this wiki for a variety of reasons.</ref> Administrators should be aware that deletion is not permanent. All pages and files<ref>In the interest of keeping the wiki's overall file size low, sometimes deleted images are pruned on the backend and thus cannot be recovered, so technically not ''all'' images are ''always'' recoverable. But '''pages''' ''are'' always recoverable.</ref> can be [[mw:Help:Deletion and undeletion|undeleted]]. To delete specific revisions, see [[mediawikiwiki:Help:RevisionDelete|Help:RevisionDelete]].
 
=== Blocking guidelines ===
An administrator is ''not'' a moderator; they do not exist to punish. A ''punitive'' block is prohibited unless asked of by EDC leadership (which should be clearly documented in the block reason). Usage of administrator tools are purely to protect and enrich the wiki. In this regard, blocking a wiki account should be because without the block the account will continually be disruptive. The account holder may be drunk, having an emotional episode, lashing out in response to some kind of falling out, or the account may be compromised. In such situations, EDC leadership should be notified and the account blocked. Block length is at the administrator's discretion, though doing so indefinitely until hearing back from EDC leadership is always an option.


Usage of the page protection and deletion tools are at administrator discretion (with an expectation of working in tandem with fellow administrators and other wiki-enthusiasts). The actual use of the tools are explained at [[mw:Manual:Administrators|Manual:Administrators]] (though note not all permissions the page states administrators have are actually available on this wiki). Administrators should be aware that deletion is not permanent, and accidental or ignorant deletion is not something to fear. All pages can be [[mw:Help:Deletion and undeletion|undeleted]].
When blocking, as best practice, please ensure the following.


=== Usage guidelines ===
* Blocks should always be marked as <code>Sitewide</code>.
The only hard guideline is that administrators should never block to punish, but as a means of stopping disruption from an account {{Emdash}} usually in response to an account compromise, the account owner lashing out emotionally, or the account owner acting abusively in response to some falling out with the Endurance Coalition or any specific member. This is performed at [[Special:Block]].
* The box <code>Editing their own talk page</code> should always be ticked.
* Blocks should always be given a legible reason.


== Interface administrator ==
== Interface administrator ==
An interface administrator has no correlation with an administrator, and are simply accounts which can edit interface pages (e.g the <code>Module:</code> and <code>MediaWiki:</code> namespace) and import pages from other MediaWiki sites.
: ''List of interface administrators available [[Special:ListUsers/interface-admin|here]]''.
An '''interface administrator''' can edit pages in the <code>Module:</code> and <code>MediaWiki:</code> [[mw:Help:Namespaces|namespaces]] and import pages from other wikis. The <code>Module:</code> namespace contains JavaScript necessary for certain templates to function. The <code>MediaWiki:</code> namespace contains text which changes the look of the interface (e.g [[MediaWiki:Upload-summary]] which displays the warning at the top of [[Special:Upload]]).
 
== Edit filter manager ==
: ''List of edit filter managers available [[Special:ListUsers/edit-filter-manager|here]]''.
An '''edit filter manager''' is able to create and edit filters at [[Special:AbuseFilter]]. They can also view and edit the private filters. The abuse filter is a set of [[wikipedia:Regular expression|regular expression]] (sometimes called "regex) patterns that perform certain actions when triggered. This wiki uses filters to prevent certain behaviors which may cause harm. Filters are marked private by edit filter managers at their discretion. This permission is not bundled into another permission due to the technical knowledge needed to create, edit, and interpret regex.
 
== Account specialist ==
: ''List of account specialists available [[Special:ListUsers/account-specialist|here]]. Note that [[Special:ListUsers/bureaucrat|bureaucrats]] are functionally also account specialists.''
An '''account specialist''' can create accounts for users and edit accounts to assist with recovery. Account creation is done through [[Special:CreateAccount]] and editing is done through [[Special:EditAccount]]. All permissions account specialists have bureaucrats also have, and so they are ''also'' account specialists.
 
=== Creating an account ===
Creating the account is simple. Follow the interface at [[Special:CreateAccount]]. Leave the email and real name fields blank. Write a quick reason. Click <code>Create account</code>. That's it.
 
==== Verification template ====
After the account physically exists, there is one more step which is ''slightly'' more complicated, which is giving the account their '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' template. Since emails are not stored for privacy reasons<ref>Also because to send emails and not be immediately received by most providers as spam requires ''way'' more effort than is worth it to do.</ref>, there is no easy way  {{Emdash}} aside from word of mouth {{Emdash}} to connect a wiki account to a particular person. The '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' template fixes this. The downside is it requires some effort.
 
To begin, go to the new account's user page. This is <code>User:</code> followed by the '''exact''' name you gave them at [[Special:CreateAccount]]. For example, Sirdog's user page is <code>User:Sirdog</code>. You will be told the page doesn't exist since you just created the account. Create the page.
 
At the '''top''' of the page, copy and paste the following:
<pre>
{{Account verified|id=}}
</pre>
 
After <code>id=</code> but before the curly brackets (<code>}}</code>), you'll write in their Discord ID.<ref>While usernames are unique to the user, they are changeable. Discord IDs are not.</ref>
 
{{Note|If you want to double check that what you have copied is a Discord ID, you can put it into a website such as [https://discord.id/ Discord Lookup] and see if it gives you the user in question.|type=reminder}}
 
To get a Discord ID, you need to [https://discord.com/developers/docs/activities/building-an-activity#step-0-enable-developer-mode enable developer mode] on Discord (Settings > Advanced > Developer mode), right click the account's ''name'' on any message they've sent, and click the button <code>Copy User ID</code>. You will paste this after <code>id=</code>. It should be a long number. For example, Sirdog's Discord ID is <code>281589411962028034</code>.
 
The following is an example of a properly filled out template.
<pre>
{{Account verified|id=281589411962028034}}
</pre>
 
After you've done this, save the page. Double check the template doesn't look wonky, then, you are done. Thank you!<ref>Curious minds may wonder why this is enough if anyone can edit user pages. An edit filter stops editors without the bureaucrat or account specialist permissions from messing with the template.</ref>
 
=== Guidelines ===
 
* Accounts should only be made for people currently in the Endurance Coalition Discord. Those who aren't are ineligible.
* Never click <code>Close account</code> in the [[Special:EditAccount]] interface.<ref>This just scrambles the person's password and email. It doesn't do anything crazy or irreversible. However, if a user needs to not edit the wiki due to disruption, an administrator needs to handle it (via [[Special:Block]]), ''not'' an account specialist.</ref>
* To help recover an account, simply use [[Special:EditAccount]] to change the person's password to something random and give it to them. '''Instruct them to change it immediately'''.
** Most of the time, account verification is simple since the Discord account for most users are well known. But if there is even a ''sliver'' of doubt, use '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' to be sure.
** If there is even a ''sliver'' of doubt that a '''Discord account''' requesting recovery is compromised, forward the matter to EDC leadership, and do not do anything to the relevant wiki account.
** If part of account recovery is that the individual has lost access to their 2FA and their recovery codes an EDC <code>@SYS:OP</code> will need to assist them.<ref>This is because a backend maintenance script has to be run to remove someone's 2FA.</ref>


== Footnotes ==
== Footnotes ==
{{Reflist}}
{{Reflist}}
[[Category:Meta pages]]