Page Restriction Modification

8.05.2b:

Simply extract the php files to your '<deki>/web/includes' directory.  You may want to rename the original files before hand:

• GlobalFunctions.php
• AdminGroups.php
• AdminUsers.php

Change notes:

The original version used DreamUserManagement.php and DreamGroupManagement.php to call wfResetRestrictions.  However, that approach resulted in the grants being rewritten for every single group or user update.  I moved the call to AdminGroups.php and AdminUsers.php so that the wiki is only updated once.  This was neccessary mostly because of the poor speed design of wfResetRestrictions.  Sorry, but I still haven't made an attempt to increase the reset's overall speed yet.  The original version of wfResetRestrictions would post a 'Permissions updated' for every page that was touched.  The new version is modified to only report a single time once the update is finished.

8.08:

The method has been redesigned slightly.  The main difference is that triggering a full grant reset is manually done on the Authentication sub-page of deki-cp.

Extract the following files to your wiki directory.  Renaming/archiving the original files is recommended:

• <root_dir>/web/includes/GlobalFunctions.php
• <root_dir>/web/deki-cp/authentication.php
• <root_dir>/web/deki-cp/templates/authentication/listing.php
• <root_dir>/web/resources/resources.custom.txt  *if you already have an existing custom file, just append the contents of this one

Change notes:

This version puts grant resets in the hands of the admin now.  Simply navigate to the Authentication page of the control panel, and there should be a sub-section that triggers a grant reset.  All of the logic for the reset is contained in the updated authentication.php file.  I attempted to minimize the amount of API calls to improve speed (it gathers all of the needed data using MySQL).  Unfortunately, it turns out that most of the time sink is within the API call to update the page grants.  Pages which require a grant update take an average of about 10 times longer to process than ones which don't (each API call ranged from ~40ms to over 200ms on my dev PC).  Fortunately, if a page requires no updates, the API call only takes a few ms (ranged from 4ms to 8ms for me).

8.05.2b:

1. Change the commenting in GlobalFunctions.php:
   • Go to around 1580 and 1650 in GlobalFunctions.php.  You should find blocks of code that look like the code displayed below.

     $grants = array();
     $groups = array_unique($groups);
     $users = array_unique($users);
     
     //foreach ($users as $userId) 
     //{
     //	$grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'user' => array('@id' => $userId));
     //}
     //foreach ($groups as $groupId) 
     //{
     //	$grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'group' => array('@id' => $groupId));
     //}
     
     foreach ($users as $userId) 
     {
     	$role = new DreamUserManagement();
     	$grants[] = array('permissions' => array('role' => $role->getById($userId)->GetRole()->GetName()), 'user' => array('@id' => $userId));
     }
     foreach ($groups as $groupId) 
     {
     	$role = new DreamGroupManagement();
     	$grants[] = array('permissions' => array('role' => $role->getById($groupId)->GetRole()->GetName()), 'group' => array('@id' => $groupId));
     }

   • Change the comment notation (//): remove at lines 5-12, and add at lines 14-23.
   • The 'fixed' code blocks should look like this.

     $grants = array();
     $groups = array_unique($groups);
     $users = array_unique($users);
     
     foreach ($users as $userId) 
     {
     	$grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'user' => array('@id' => $userId));
     }
     foreach ($groups as $groupId) 
     {
     	$grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'group' => array('@id' => $groupId));
     }
     
     //foreach ($users as $userId) 
     //{
     //	$role = new DreamUserManagement();
     //	$grants[] = array('permissions' => array('role' => $role->getById($userId)->GetRole()->GetName()), 'user' => array('@id' => $userId));
     //}
     //foreach ($groups as $groupId) 
     //{
     //	$role = new DreamGroupManagement();
     //	$grants[] = array('permissions' => array('role' => $role->getById($groupId)->GetRole()->GetName()), 'group' => array('@id' => $groupId));
     //}

2. Trigger wfResetRestrictions or manually update restrictions by using More->Restrict access.
3. Restore original versions of the php files once the grants have returned to normal.

8.08:

1. Change the commenting in GlobalFunctions.php and authentication.php:
   1. In GlobalFunctions.php, find the following code block (starts at line 1584) and swap the line commenting:

      //foreach ($users as $userId)
          //{
          //    $grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'user' => array('@id' => $userId));
          //}
          //foreach ($groups as $groupId)
          //{
          //    $grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'group' => array('@id' => $groupId));
          //}
      
          foreach ($users as $userId)
          {
              $role = new DreamUserManagement();
              $grants[] = array('permissions' => array('role' => $role->getById($userId)->GetRole()->GetName()), 'user' => array('@id' => $userId));
          }
          foreach ($groups as $groupId)
          {
              $role = new DreamGroupManagement();
              $grants[] = array('permissions' => array('role' => $role->getById($groupId)->GetRole()->GetName()), 'group' => array('@id' => $groupId));
          }

   2. The fixed GlobalFunction.php should look like this:

      foreach ($users as $userId)
          {
              $grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'user' => array('@id' => $userId));
          }
          foreach ($groups as $groupId)
          {
              $grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'group' => array('@id' => $groupId));
          }
      
          //foreach ($users as $userId)
          //{
          //    $role = new DreamUserManagement();
          //    $grants[] = array('permissions' => array('role' => $role->getById($userId)->GetRole()->GetName()), 'user' => array('@id' => $userId));
          //}
          //foreach ($groups as $groupId)
          //{
          //    $role = new DreamGroupManagement();
          //    $grants[] = array('permissions' => array('role' => $role->getById($groupId)->GetRole()->GetName()), 'group' => array('@id' => $groupId));
          //}

   3. In authentication.php, find the following code block (starts at line 692) and swap the the commenting on the $grant[] assignments:

      foreach ($pages[$pid]['grants'] as $grant)
          {
              if (strncmp($grant, 'g', 1) == 0)
              {
                  $grants[] = array('permissions' => array('role' => $group_roles[substr($grant, 1)]), 'group' => array('@id' => substr($grant, 1)));
                  //$grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'group' => array('@id' => substr($grant, 1)));
              }
              else
              {
                  $grants[] = array('permissions' => array('role' => $user_roles[substr($grant, 1)]), 'user' => array('@id' => substr($grant, 1)));
                  //$grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'user' => array('@id' => substr($grant, 1)));
              }
          }

   4. The fixed authentication.php should look like this:
      

      foreach ($pages[$pid]['grants'] as $grant)
          {
              if (strncmp($grant, 'g', 1) == 0)
              {
                  //$grants[] = array('permissions' => array('role' => $group_roles[substr($grant, 1)]), 'group' => array('@id' => substr($grant, 1)));
                  $grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'group' => array('@id' => substr($grant, 1)));
              }
              else
              {
                  //$grants[] = array('permissions' => array('role' => $user_roles[substr($grant, 1)]), 'user' => array('@id' => substr($grant, 1)));
                  $grants[] = array('permissions' => array('role' => $wgDefaultRestrictRole), 'user' => array('@id' => substr($grant, 1)));
              }
          }

2. Trigger a grant reset from the Authentication page in the new control panel, or manually reset grants by using More->Restrict access.
3. Restore original versions of the php files once the grants have returned to normal.