Help:Permissions: Difference between revisions
No edit summary |
No edit summary |
||
| (5 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{Ambox|image=[[File:Authenticator.jpg|40px]]|text=[[wikipedia:Multi-factor authentication|''' | {{Ambox|image=[[File:Authenticator.jpg|40px|link=]]|text=[[wikipedia:Multi-factor authentication|'''Multi-factor authentication''']] is required by the software to make use of any permission listed on this page.}} | ||
This wiki has different account permissions to assist in it's administration. Any person with an account may request any permission. Granting of permissions is at EDC leadership and bureaucrat discretion. | This wiki has different account permissions to assist in it's administration. Any person with an account may request any permission. Granting of permissions is at EDC leadership and bureaucrat discretion. | ||
== Bureaucrat == | == Bureaucrat == | ||
A '''bureaucrat''' can | A '''bureaucrat''' can tie IP addresses to wiki accounts and vice versa, delete material on the wiki in such a manner to where even ''administrators'' cannot see it, and can grant and revoke any permission listed on this page. | ||
The following individuals in the Endurance Coalition are bureaucrats. | The following individuals in the Endurance Coalition are bureaucrats. | ||
| Line 50: | Line 50: | ||
At the '''top''' of the page, copy and paste the following: | At the '''top''' of the page, copy and paste the following: | ||
<pre> | <pre> | ||
{{Account verified | {{Account verified|id=}} | ||
</pre> | </pre> | ||
After <code>id=</code> but before the curly brackets (<code>}}</code>), you'll write in their Discord ID.<ref>While usernames are unique to the user, they are changeable. Discord IDs are not.</ref> | |||
To get a Discord ID, you need to enable developer mode on Discord (Settings > Advanced > Developer mode), right click the account's name on any message they've sent, and click the button <code>Copy User ID</code>. You will paste this after <code>id=</code>. It should | {{Note|If you want to double check that what you have copied is a Discord ID, you can put it into a website such as [https://discord.id/ Discord Lookup] and see if it gives you the user in question.|type=reminder}} | ||
To get a Discord ID, you need to [https://discord.com/developers/docs/activities/building-an-activity#step-0-enable-developer-mode enable developer mode] on Discord (Settings > Advanced > Developer mode), right click the account's ''name'' on any message they've sent, and click the button <code>Copy User ID</code>. You will paste this after <code>id=</code>. It should be a long number. For example, Sirdog's Discord ID is <code>281589411962028034</code>. | |||
The following is an example of a properly filled out template. | The following is an example of a properly filled out template. | ||
<pre> | <pre> | ||
{{Account verified | {{Account verified|id=281589411962028034}} | ||
</pre> | </pre> | ||
| Line 67: | Line 69: | ||
* Accounts should only be made for people currently in the Endurance Coalition Discord. Those who aren't are ineligible. | * Accounts should only be made for people currently in the Endurance Coalition Discord. Those who aren't are ineligible. | ||
* Never click <code>Close account</code> in the [[Special:EditAccount]] interface.<ref> | * Never click <code>Close account</code> in the [[Special:EditAccount]] interface.<ref>This just scrambles the person's password and email. It doesn't do anything crazy or irreversible. However, if a user needs to not edit the wiki due to disruption, an administrator needs to handle it (via [[Special:Block]]), ''not'' an account specialist.</ref> | ||
* To help recover an account, simply use [[Special:EditAccount]] to change the person's password to something random and give it to them. '''Instruct them to change it immediately'''. | * To help recover an account, simply use [[Special:EditAccount]] to change the person's password to something random and give it to them. '''Instruct them to change it immediately'''. | ||
** Most of the time, account verification is simple | ** Most of the time, account verification is simple since the Discord account for most users are well known. But if there is even a ''sliver'' of doubt, use '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' to be sure. | ||
** If there is even a ''sliver'' of doubt that a '''Discord account''' requesting recovery is compromised, forward the matter to EDC leadership, and do not do anything to the relevant wiki account. | ** If there is even a ''sliver'' of doubt that a '''Discord account''' requesting recovery is compromised, forward the matter to EDC leadership, and do not do anything to the relevant wiki account. | ||
** If part of account recovery is that the individual has lost access to their 2FA and their recovery codes | ** If part of account recovery is that the individual has lost access to their 2FA and their recovery codes an EDC <code>@SYS:OP</code> will need to assist them.<ref>This is because a backend maintenance script has to be run to remove someone's 2FA.</ref> | ||
== Footnotes == | == Footnotes == | ||
Latest revision as of 03:17, 5 October 2025
Multi-factor authentication is required by the software to make use of any permission listed on this page. |
This wiki has different account permissions to assist in it's administration. Any person with an account may request any permission. Granting of permissions is at EDC leadership and bureaucrat discretion.
Bureaucrat
A bureaucrat can tie IP addresses to wiki accounts and vice versa, delete material on the wiki in such a manner to where even administrators cannot see it, and can grant and revoke any permission listed on this page.
The following individuals in the Endurance Coalition are bureaucrats.
- Sirdog (sirdog3355)
Administrator
Administrators are to use their revision deletion tools to remove unwanted information from being public. If there is personally identifiable information, a bureaucrat must be notified even after deletion. If there is any doubt if it's identifiable, default to notifying a bureaucrat anyway. If the administrator is confused on how to delete revisions properly, they should just delete the page itself. A bureaucrat will restore and delete the revisions properly later. |
- List of administrators available here.
An administrator is a janitor. They are able to block user accounts (which restrict all editing and use of advanced permissions), protect pages from editing (and thus edit any protected page[1]), and are able to delete pages and revisions. This makes it much easier to control the wiki's organization.
Usage of the above tools are at administrator discretion (with an expectation of working nicely with others). The actual use of the tools are explained at Manual:Administrators.[2] Administrators should be aware that deletion is not permanent. All pages and files[3] can be undeleted. To delete specific revisions, see Help:RevisionDelete.
Blocking guidelines
An administrator is not a moderator; they do not exist to punish. A punitive block is prohibited unless asked of by EDC leadership (which should be clearly documented in the block reason). Usage of administrator tools are purely to protect and enrich the wiki. In this regard, blocking a wiki account should be because without the block the account will continually be disruptive. The account holder may be drunk, having an emotional episode, lashing out in response to some kind of falling out, or the account may be compromised. In such situations, EDC leadership should be notified and the account blocked. Block length is at the administrator's discretion, though doing so indefinitely until hearing back from EDC leadership is always an option.
When blocking, as best practice, please ensure the following.
- Blocks should always be marked as
Sitewide. - The box
Editing their own talk pageshould always be ticked. - Blocks should always be given a legible reason.
Interface administrator
- List of interface administrators available here.
An interface administrator can edit pages in the Module: and MediaWiki: namespaces and import pages from other wikis. The Module: namespace contains JavaScript necessary for certain templates to function. The MediaWiki: namespace contains text which changes the look of the interface (e.g MediaWiki:Upload-summary which displays the warning at the top of Special:Upload).
Edit filter manager
- List of edit filter managers available here.
An edit filter manager is able to create and edit filters at Special:AbuseFilter. They can also view and edit the private filters. The abuse filter is a set of regular expression (sometimes called "regex) patterns that perform certain actions when triggered. This wiki uses filters to prevent certain behaviors which may cause harm. Filters are marked private by edit filter managers at their discretion. This permission is not bundled into another permission due to the technical knowledge needed to create, edit, and interpret regex.
Account specialist
- List of account specialists available here. Note that bureaucrats are functionally also account specialists.
An account specialist can create accounts for users and edit accounts to assist with recovery. Account creation is done through Special:CreateAccount and editing is done through Special:EditAccount. All permissions account specialists have bureaucrats also have, and so they are also account specialists.
Creating an account
Creating the account is simple. Follow the interface at Special:CreateAccount. Leave the email and real name fields blank. Write a quick reason. Click Create account. That's it.
Verification template
After the account physically exists, there is one more step which is slightly more complicated, which is giving the account their {{Account verified}} template. Since emails are not stored for privacy reasons[4], there is no easy way — aside from word of mouth — to connect a wiki account to a particular person. The {{Account verified}} template fixes this. The downside is it requires some effort.
To begin, go to the new account's user page. This is User: followed by the exact name you gave them at Special:CreateAccount. For example, Sirdog's user page is User:Sirdog. You will be told the page doesn't exist since you just created the account. Create the page.
At the top of the page, copy and paste the following:
{{Account verified|id=}}
After id= but before the curly brackets (}}), you'll write in their Discord ID.[5]
To get a Discord ID, you need to enable developer mode on Discord (Settings > Advanced > Developer mode), right click the account's name on any message they've sent, and click the button Copy User ID. You will paste this after id=. It should be a long number. For example, Sirdog's Discord ID is 281589411962028034.
The following is an example of a properly filled out template.
{{Account verified|id=281589411962028034}}
After you've done this, save the page. Double check the template doesn't look wonky, then, you are done. Thank you![6]
Guidelines
- Accounts should only be made for people currently in the Endurance Coalition Discord. Those who aren't are ineligible.
- Never click
Close accountin the Special:EditAccount interface.[7] - To help recover an account, simply use Special:EditAccount to change the person's password to something random and give it to them. Instruct them to change it immediately.
- Most of the time, account verification is simple since the Discord account for most users are well known. But if there is even a sliver of doubt, use {{Account verified}} to be sure.
- If there is even a sliver of doubt that a Discord account requesting recovery is compromised, forward the matter to EDC leadership, and do not do anything to the relevant wiki account.
- If part of account recovery is that the individual has lost access to their 2FA and their recovery codes an EDC
@SYS:OPwill need to assist them.[8]
Footnotes
- ↑ Not strictly true. Certain pages are protected by an abuse filter and interface pages require being an interface administrator to edit.
- ↑ The linked page makes assumptions about the permissions administrators have. Some permissions may not be available on this wiki for a variety of reasons.
- ↑ In the interest of keeping the wiki's overall file size low, sometimes deleted images are pruned on the backend and thus cannot be recovered, so technically not all images are always recoverable. But pages are always recoverable.
- ↑ Also because to send emails and not be immediately received by most providers as spam requires way more effort than is worth it to do.
- ↑ While usernames are unique to the user, they are changeable. Discord IDs are not.
- ↑ Curious minds may wonder why this is enough if anyone can edit user pages. An edit filter stops editors without the bureaucrat or account specialist permissions from messing with the template.
- ↑ This just scrambles the person's password and email. It doesn't do anything crazy or irreversible. However, if a user needs to not edit the wiki due to disruption, an administrator needs to handle it (via Special:Block), not an account specialist.
- ↑ This is because a backend maintenance script has to be run to remove someone's 2FA.