From 1520bd6d4cd237d381f7d2461457464cdbcb8a60 Mon Sep 17 00:00:00 2001
From: Pyjacpp <pyjacpp@crans.org>
Date: Wed, 22 Jul 2026 12:31:26 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20cr=C3=A9ation=20compte=20via=20LDAP/Note?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 hosts/vm/mediakiwi/category-lockdown.patch | 10 +++++++---
 hosts/vm/mediakiwi/mediawiki.nix           | 12 ++++++++----
 2 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/hosts/vm/mediakiwi/category-lockdown.patch b/hosts/vm/mediakiwi/category-lockdown.patch
index 185ab41..e64c1bb 100644
--- a/hosts/vm/mediakiwi/category-lockdown.patch
+++ b/hosts/vm/mediakiwi/category-lockdown.patch
@@ -1,5 +1,5 @@
 diff --git a/CategoryLockdown.php b/CategoryLockdown.php
-index 3309c52..f2cef51 100644
+index 3309c52..c4f4cb0 100644
 --- a/CategoryLockdown.php
 +++ b/CategoryLockdown.php
 @@ -1,6 +1,7 @@
@@ -50,7 +50,7 @@ index 3309c52..f2cef51 100644
  			if ( !$permissions ) {
  				continue;
  			}
-@@ -56,15 +59,40 @@ class CategoryLockdown {
+@@ -56,15 +59,44 @@ class CategoryLockdown {
  				$combinedGroups[] = $allowedGroup;
  			}
  		}
@@ -80,7 +80,11 @@ index 3309c52..f2cef51 100644
 +				continue; # Skip if this group rule doesn’t match the user
 +			}
 +
-+			$requiredCat = $groupCategories[$action] ?? [];
++			$requiredCat = $groupCategories[$action];
++			if ( $requiredCat == null ) {
++				continue;
++			}
++
 +			$groupLocked = true;
 +			foreach ( $requiredCat as $c ) {
 +				if ( in_array( $c, $categories ) ) {
diff --git a/hosts/vm/mediakiwi/mediawiki.nix b/hosts/vm/mediakiwi/mediawiki.nix
index 1b364d1..94043ea 100644
--- a/hosts/vm/mediakiwi/mediawiki.nix
+++ b/hosts/vm/mediakiwi/mediawiki.nix
@@ -77,8 +77,8 @@ in
       $wgMaxUploadSize = 512 * 1024 * 1024;
       $wgUseImageMagick = true;
       $wgImageMagickConvertCommand = '${pkgs.imagemagick}/bin/convert';
-      $wgStrictFileExtensions = false;
-      $wgFileExtensions[] = 'pdf';      
+      $wgStrictFileExtensions = false; # On autorise toutes les extensions sauf https://www.mediawiki.org/wiki/Manual:$wgProhibitedFileExtensions
+      $wgFileExtensions[] = 'pdf';
       $wgFileExtensions[] = 'svg';
 
       # Limite mémoire, quand on fait de gros importi (9M de xml), le parser
@@ -145,7 +145,7 @@ in
       # Access Control
       $wgGroupPermissions['*']['edit'] = false; # Restrict edition for anonymous user
       $wgGroupPermissions['*']['createaccount'] = false; # Restrict the creation of account to sysop only
-
+      $wgGroupPermissions['*']['autocreateaccount'] = true; # Création de comptes depuis LDAP et Note mais pas local
       $wgCategoryLockdownWhitelist = [
         "Spécial:Connexion",
         "Spécial:Connexion/return",
@@ -154,8 +154,9 @@ in
         "MediaWiki:Common.css",
         "MediaWiki:Common.js"
       ];
+      $wgCategoryGroupLockdown["!user"]["read"] = [ "Page Publique" ]; # Restrict read for non-user (i.e. anonymous) on execpt for Page Publique
 
-      $wgCategoryGroupLockdown["!user"]["read"] = [ "Page Publique" ]; # Restrict read for non-user (i.e. anonymous) on execpt for Page Publique      # Extensions
+      # Extensions
       $wgWikiEditorRealtimePreview = true;
       $wgCiteBookReferencing = true;
       $wgPdfProcessor = '${pkgs.ghostscript}/bin/gs';
@@ -174,6 +175,9 @@ in
         NS_ARCHIVE => "Archive",
         NS_ARCHIVE_TALK => "Discussion_archive",
       ];
+      $wgNamespacesWithSubpages[NS_MAIN] = true;
+      $wgNamespacesWithSubpages[NS_ARCHIVE] = true;
+      $wgVisualEditorAvailableNamespaces[NS_ARCHIVE] = true;
 
       # Debug
       $wgShowExceptionDetails = true;