Creation of separate user group for editing sitewide CSS/JS/announcement 2
New user group for editing sitewide CSS/JS
[edit](Please help translate to your language)
Hi all!
To improve the security of our readers and editors, permission handling for CSS/JS pages has changed. (These are pages like MediaWiki:Common.css
and MediaWiki:Vector.js
which contain code that is executed in the browsers of users of the site.)
A new user group, interface-admin
, has been created.
Starting four weeks from now, only members of this group will be able to edit CSS/JS pages that they do not own (that is, any page ending with .css
or .js
that is either in the MediaWiki:
namespace or is another user's user subpage).
You can learn more about the motivation behind the change here.
Please add users who need to edit CSS/JS to the new group (this can be done the same way new administrators are added, by stewards or local bureaucrats). This is a dangerous permission; a malicious user or a hacker taking over the account of a careless interface-admin can abuse it in far worse ways than admin permissions could be abused. Please only assign it to users who need it, who are trusted by the community, and who follow common basic password and computer security practices (use strong passwords, do not reuse passwords, use two-factor authentication if possible, do not install software of questionable origin on your machine, and use antivirus software if that is standard practice in your environment).
Thanks!
Tgr (talk) ¬¬¬¬¬ (via global message delivery)