With the installation of a few different kinds of extensions, you can enforce access restrictions down to a per-page or per-user granularity level. There are also more broad restrictions such as per-namespace and per-group. (Users can be added and removed from various user groups, which each have varying permissions. A namespace is a group of pages with the same prefix in its title. They need to be configured for you by our support team.)
If you need... | Consider using... |
Per-user and per-page restrictions (each page has different users allowed to see it) | AccessControl |
Per-group and per-namespace restrictions (allow only certain user groups to see a namespace) | Lockdown |
File access restrictions | NSFileRepo |
These extensions can be installed by contacting our support team. If you are requesting Lockdown and NSFileRepo to be installed, be sure to specify which namespaces and user groups you will need.
For instance, if The Brick Laying Company needs some pages to contain confidential R&D and human resources pages and files, they should request Lockdown and NSFileRepo, and ask for the following namespaces and user groups to be created:
- An HR namespace. All pages beginning with "HR:" will be in this namespace. For instance, "HR:Evaluation for John Doe". HR namespace pages can only be accessed by users in the HR group, as well as wiki administrators if so desired.
- An HR user group. All HR employees will be added to this group via Special:UserRights by a wiki administrator. This will allow them to view the HR namespace and HR files.
- All images uploaded beginning with "HR:" will be restricted to those in the HR user group.
- An R&D namespace. All pages beginning with "RnD:" will be in this namespace. For instance, "RnD:Project Pomegranate". R&D namespace pages can only be accessed by users in the R&D group, as well as wiki administrators if so desired.
- An R&D user group. All R&D employees will be added to this group via Special:UserRights by a wiki administrator. This will allow them to view the R&D namespace and R&D files.
- All images uploaded beginning with "RnD:" will be restricted to those in the R&D user group.