crans
/
nixos
mirror of https://gitlab.crans.org/nounous/nixos
19
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: création compte via LDAP/Note

wiki
Pyjacpp 2026-07-22 12:31:26 +02:00
parent 26cb033960
commit 1520bd6d4c
No known key found for this signature in database
GPG Key ID: ED479A5A26930939
2 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
hosts/vm/mediakiwi/category-lockdown.patch
View File

@ -1,5 +1,5 @@
diff --git a/CategoryLockdown.php b/CategoryLockdown.php diff --git a/CategoryLockdown.php b/CategoryLockdown.php
index 3309c52..f2cef51 100644 index 3309c52..c4f4cb0 100644
--- a/CategoryLockdown.php --- a/CategoryLockdown.php
+++ b/CategoryLockdown.php +++ b/CategoryLockdown.php
@@ -1,6 +1,7 @@ @@ -1,6 +1,7 @@
@ -50,7 +50,7 @@ index 3309c52..f2cef51 100644
if ( !$permissions ) { if ( !$permissions ) {
continue; continue;
} }
@@ -56,15 +59,40 @@ class CategoryLockdown { @@ -56,15 +59,44 @@ class CategoryLockdown {
$combinedGroups[] = $allowedGroup; $combinedGroups[] = $allowedGroup;
} }
} }
@ -80,7 +80,11 @@ index 3309c52..f2cef51 100644
+ continue; # Skip if this group rule doesn’t match the user + continue; # Skip if this group rule doesn’t match the user
+ } + }
+ +
+ $requiredCat = $groupCategories[$action] ?? []; + $requiredCat = $groupCategories[$action];
+ if ( $requiredCat == null ) {
+ continue;
+ }
+
+ $groupLocked = true; + $groupLocked = true;
+ foreach ( $requiredCat as $c ) { + foreach ( $requiredCat as $c ) {
+ if ( in_array( $c, $categories ) ) { + if ( in_array( $c, $categories ) ) {

10
hosts/vm/mediakiwi/mediawiki.nix
View File

@ -77,7 +77,7 @@ in
$wgMaxUploadSize = 512 * 1024 * 1024; $wgMaxUploadSize = 512 * 1024 * 1024;
$wgUseImageMagick = true; $wgUseImageMagick = true;
$wgImageMagickConvertCommand = '${pkgs.imagemagick}/bin/convert'; $wgImageMagickConvertCommand = '${pkgs.imagemagick}/bin/convert';
$wgStrictFileExtensions = false; $wgStrictFileExtensions = false; # On autorise toutes les extensions sauf https://www.mediawiki.org/wiki/Manual:$wgProhibitedFileExtensions
$wgFileExtensions[] = 'pdf'; $wgFileExtensions[] = 'pdf';
$wgFileExtensions[] = 'svg'; $wgFileExtensions[] = 'svg';
@ -145,7 +145,7 @@ in
# Access Control # Access Control
$wgGroupPermissions['*']['edit'] = false; # Restrict edition for anonymous user $wgGroupPermissions['*']['edit'] = false; # Restrict edition for anonymous user
$wgGroupPermissions['*']['createaccount'] = false; # Restrict the creation of account to sysop only $wgGroupPermissions['*']['createaccount'] = false; # Restrict the creation of account to sysop only
$wgGroupPermissions['*']['autocreateaccount'] = true; # Création de comptes depuis LDAP et Note mais pas local
$wgCategoryLockdownWhitelist = [ $wgCategoryLockdownWhitelist = [
"Spécial:Connexion", "Spécial:Connexion",
"Spécial:Connexion/return", "Spécial:Connexion/return",
@ -154,8 +154,9 @@ in
"MediaWiki:Common.css", "MediaWiki:Common.css",
"MediaWiki:Common.js" "MediaWiki:Common.js"
]; ];
$wgCategoryGroupLockdown["!user"]["read"] = [ "Page Publique" ]; # Restrict read for non-user (i.e. anonymous) on execpt for Page Publique
$wgCategoryGroupLockdown["!user"]["read"] = [ "Page Publique" ]; # Restrict read for non-user (i.e. anonymous) on execpt for Page Publique # Extensions # Extensions
$wgWikiEditorRealtimePreview = true; $wgWikiEditorRealtimePreview = true;
$wgCiteBookReferencing = true; $wgCiteBookReferencing = true;
$wgPdfProcessor = '${pkgs.ghostscript}/bin/gs'; $wgPdfProcessor = '${pkgs.ghostscript}/bin/gs';
@ -174,6 +175,9 @@ in
NS_ARCHIVE => "Archive", NS_ARCHIVE => "Archive",
NS_ARCHIVE_TALK => "Discussion_archive", NS_ARCHIVE_TALK => "Discussion_archive",
]; ];
$wgNamespacesWithSubpages[NS_MAIN] = true;
$wgNamespacesWithSubpages[NS_ARCHIVE] = true;
$wgVisualEditorAvailableNamespaces[NS_ARCHIVE] = true;
# Debug # Debug
$wgShowExceptionDetails = true; $wgShowExceptionDetails = true;