Help:Permissions: Difference between revisions

Line 1:

{{Ambox|image=[[File:Tux.svg|40px|link=]]|text=Anyone with super user privileges on the Endurance Coalition VPS is entitled to all permissions upon request. They are not granted by default as a practical matter.}}

This wiki has different account permissions to assist in it's administration~~. Any editor may ask a bureaucrat for any permission. Granting and revoking is at a bureaucrat's discretion~~.

This wiki has different account permissions to assist in it's administration.

== Bureaucrat ==

A '''bureaucrat''' can review IP addresses used to access wiki accounts (reserved for investigating a user account being compromised), delete material on the wiki in such a manner to where even administrators cannot see it (reserved for ''personally identifiable'' information), and can grant and revoke any permission listed on this page.

The following individuals in the Endurance Coalition are bureaucrats~~. This permission is strictly controlled. Anyone with an account may still request it, just odds are higher than normal that it'll be denied~~.

The following individuals in the Endurance Coalition are bureaucrats.

* '''[[User:Sirdog|Sirdog]]''' (sirdog3355)

Line 19:

Usage of the above tools are at administrator discretion (with an expectation of working nicely with others). The actual use of the tools are explained at [[mw:Manual:Administrators|Manual:Administrators]].<ref>The linked page makes assumptions about the permissions administrators have. Some permissions may not be available on this wiki for a variety of reasons.</ref> Administrators should be aware that deletion is not permanent. All pages and files<ref>In the interest of keeping the wiki's overall file size low, sometimes deleted images are pruned on the backend and thus cannot be recovered, so technically not ''all'' images are ''always'' recoverable. But '''pages''' ''are'' always recoverable.</ref> can be [[mw:Help:Deletion and undeletion|undeleted]]. To delete specific revisions, see [[mediawikiwiki:Help:RevisionDelete|Help:RevisionDelete]].

=== ~~Usage~~ guidelines ===

=== Blocking guidelines ===

~~Administrators~~ should ~~never~~ block to ~~punish~~, ~~but to stop an~~ account ~~from disrupting~~ the ~~wiki~~. The account holder may be drunk, having an emotional episode, lashing out in response to some kind of falling out, or the account may be compromised. ~~These are~~ the ~~situations where blocking is appropriate~~. ~~Blocking~~ is ~~performed~~ at ~~[[Special:Block]]~~.

An administrator is ''not'' a moderator; they do not exist to punish. A ''punitive'' block is prohibited unless asked of by EDC leadership (which should be clearly documented in the block reason). Usage of administrator tools are purely to protect and enrich the wiki. In this regard, blocking a wiki account should be because without the block the account will continually be disruptive. The account holder may be drunk, having an emotional episode, lashing out in response to some kind of falling out, or the account may be compromised. In such situations, EDC leadership should be notified and the account blocked. Block length is at the administrator's discretion, though doing so indefinitely until hearing back from EDC leadership is always an option.

When blocking, as best practice, please ensure the following.

* Blocks should always be marked as <code>Sitewide</code>.

* The box <code>Editing their own talk page</code> should always be ticked.

* Blocks should always be given a legible reason.

* Expiration is at administrator discretion. Generally speaking, most of the examples above would warrant an indefinite block (a drunk editor perhaps a day or two, someone emotional perhaps a week; these are recommendations, not rules).

== Interface administrator ==

Line 63:

Line 64:

After you've done this, save the page. Double check the template doesn't look wonky, then, you are done. Thank you!<ref>Curious minds may wonder why this is enough if anyone can edit user pages. An edit filter stops editors without the bureaucrat or account specialist permissions from messing with the template.</ref>

=== ~~Usage guidelines~~ ===

=== Guidelines ===

* Accounts should only be made for people currently in the Endurance Coalition Discord. ~~If they~~ aren't~~, the person must be redirected to a bureaucrat for an answer~~.

* Accounts should only be made for people currently in the Endurance Coalition Discord. Those who aren't are ineligible.

* Never click <code>Close account</code> in the [[Special:EditAccount]] interface.<ref>Nothing ''actually bad'' happens if you do this. It just scrambles the person's password and blanks their email field (which is ''already'' blank). But this just creates more work if the user ever wants to, ya know, login and edit. If a user needs to not be allowed to edit ever again, then that falls to an administrator (using [[Special:Block]]) to enact, '''not''' an account specialist. A properly setup block will perform essentially the same function.</ref>

* To help recover an account, simply use [[Special:EditAccount]] to change the person's password to something random and give it to them. '''Instruct them to change it immediately'''.

** If the person is not in a position to immediately change their password (e.g at work, asleep, etc), and the account specialist ''knows'' this, it is advised the account specialist hold off on changing the password until they can. But this is not a requirement.

** Most of the time, account verification is simple sense the Discord account for most users are well known. But if there is even a ''sliver'' of doubt, use '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' to be sure.

** Most of the time, account verification is simple sense the Discord account for most users are well known. But if there is even a ''sliver'' of doubt, use ~~the~~ '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' to be sure.

** If there is even a ''sliver'' of doubt that a '''Discord account''' requesting recovery is compromised, forward the matter to EDC leadership, and do not do anything to the relevant wiki account.

** If there is even a ''sliver'' of doubt that a '''Discord account''' requesting recovery is compromised, forward the matter to an ~~administrator~~.

** If part of account recovery is that the individual has lost access to their 2FA and their recovery codes, an EDC <code>@SYS:OP</code> will need to assist them.

== Footnotes ==

@@ Line 1: / Line 1: @@
 {{Ambox|image=[[File:Tux.svg|40px|link=]]|text=Anyone with super user privileges on the Endurance Coalition VPS is entitled to all permissions upon request. They are not granted by default as a practical matter.}}
-This wiki has different account permissions to assist in it's administration. Any editor may ask a bureaucrat for any permission. Granting and revoking is at a bureaucrat's discretion.
+This wiki has different account permissions to assist in it's administration.
 == Bureaucrat ==
 A '''bureaucrat''' can review IP addresses used to access wiki accounts (reserved for investigating a user account being compromised), delete material on the wiki in such a manner to where even administrators cannot see it (reserved for ''personally identifiable'' information), and can grant and revoke any permission listed on this page.
-The following individuals in the Endurance Coalition are bureaucrats. This permission is strictly controlled. Anyone with an account may still request it, just odds are higher than normal that it'll be denied.
+The following individuals in the Endurance Coalition are bureaucrats.
 * '''[[User:Sirdog|Sirdog]]''' (sirdog3355)
@@ Line 19: / Line 19: @@
 Usage of the above tools are at administrator discretion (with an expectation of working nicely with others). The actual use of the tools are explained at [[mw:Manual:Administrators|Manual:Administrators]].<ref>The linked page makes assumptions about the permissions administrators have. Some permissions may not be available on this wiki for a variety of reasons.</ref> Administrators should be aware that deletion is not permanent. All pages and files<ref>In the interest of keeping the wiki's overall file size low, sometimes deleted images are pruned on the backend and thus cannot be recovered, so technically not ''all'' images are ''always'' recoverable. But '''pages''' ''are'' always recoverable.</ref> can be [[mw:Help:Deletion and undeletion|undeleted]]. To delete specific revisions, see [[mediawikiwiki:Help:RevisionDelete|Help:RevisionDelete]].
-=== Usage guidelines ===
+=== Blocking guidelines ===
-Administrators should never block to punish, but to stop an account from disrupting the wiki. The account holder may be drunk, having an emotional episode, lashing out in response to some kind of falling out, or the account may be compromised. These are the situations where blocking is appropriate. Blocking is performed at [[Special:Block]].
+An administrator is ''not'' a moderator; they do not exist to punish. A ''punitive'' block is prohibited unless asked of by EDC leadership (which should be clearly documented in the block reason). Usage of administrator tools are purely to protect and enrich the wiki. In this regard, blocking a wiki account should be because without the block the account will continually be disruptive. The account holder may be drunk, having an emotional episode, lashing out in response to some kind of falling out, or the account may be compromised. In such situations, EDC leadership should be notified and the account blocked. Block length is at the administrator's discretion, though doing so indefinitely until hearing back from EDC leadership is always an option.
+When blocking, as best practice, please ensure the following.
 * Blocks should always be marked as <code>Sitewide</code>.
 * The box <code>Editing their own talk page</code> should always be ticked.
 * Blocks should always be given a legible reason.
-* Expiration is at administrator discretion. Generally speaking, most of the examples above would warrant an indefinite block (a drunk editor perhaps a day or two, someone emotional perhaps a week; these are recommendations, not rules).
 == Interface administrator ==
@@ Line 63: / Line 64: @@
 After you've done this, save the page. Double check the template doesn't look wonky, then, you are done. Thank you!<ref>Curious minds may wonder why this is enough if anyone can edit user pages. An edit filter stops editors without the bureaucrat or account specialist permissions from messing with the template.</ref>
-=== Usage guidelines ===
+=== Guidelines ===
-* Accounts should only be made for people currently in the Endurance Coalition Discord. If they aren't, the person must be redirected to a bureaucrat for an answer.
+* Accounts should only be made for people currently in the Endurance Coalition Discord. Those who aren't are ineligible.
 * Never click <code>Close account</code> in the [[Special:EditAccount]] interface.<ref>Nothing ''actually bad'' happens if you do this. It just scrambles the person's password and blanks their email field (which is ''already'' blank). But this just creates more work if the user ever wants to, ya know, login and edit. If a user needs to not be allowed to edit ever again, then that falls to an administrator (using [[Special:Block]]) to enact, '''not''' an account specialist. A properly setup block will perform essentially the same function.</ref>
 * To help recover an account, simply use [[Special:EditAccount]] to change the person's password to something random and give it to them. '''Instruct them to change it immediately'''.
-** If the person is not in a position to immediately change their password (e.g at work, asleep, etc), and the account specialist ''knows'' this, it is advised the account specialist hold off on changing the password until they can. But this is not a requirement.
+** Most of the time, account verification is simple sense the Discord account for most users are well known. But if there is even a ''sliver'' of doubt, use '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' to be sure.
-** Most of the time, account verification is simple sense the Discord account for most users are well known. But if there is even a ''sliver'' of doubt, use the '''<nowiki>{{</nowiki>[[Template:Account verified|Account verified]]<nowiki>}}</nowiki>''' to be sure.
+** If there is even a ''sliver'' of doubt that a '''Discord account''' requesting recovery is compromised, forward the matter to EDC leadership, and do not do anything to the relevant wiki account.
-** If there is even a ''sliver'' of doubt that a '''Discord account''' requesting recovery is compromised, forward the matter to an administrator.
+** If part of account recovery is that the individual has lost access to their 2FA and their recovery codes, an EDC <code>@SYS:OP</code> will need to assist them.
 == Footnotes ==