Patch to make SpecialPasswordReset only available to groups

with a new minimum right 'resetpassword'. Default group: '*'. Description: wikitech-l http://article.gmane.org/gmane.science.linguistics.wikipedia.technical/55055 'Reclaiming a lost account on a private wiki: impossible'

diff --git a/includes/DefaultSettings.php b/includes/DefaultSettings.php
index d9e0de7..768cfff 100644 (file)
--- a/includes/DefaultSettings.php
+++ b/includes/DefaultSettings.php
@@ -3380,6 +3380,7 @@ $wgGroupPermissions = array();
 /** @cond file_level_code */
 // Implicit group for all visitors
 $wgGroupPermissions['*']['createaccount']    = true;
+$wgGroupPermissions['*']['resetpassword']    = true;
 $wgGroupPermissions['*']['read']             = true;
 $wgGroupPermissions['*']['edit']             = true;
 $wgGroupPermissions['*']['createpage']       = true;

diff --git a/includes/specials/SpecialPasswordReset.php b/includes/specials/SpecialPasswordReset.php
index 476ab05..b3f6772 100644 (file)
--- a/includes/specials/SpecialPasswordReset.php
+++ b/includes/specials/SpecialPasswordReset.php
@@ -29,7 +29,7 @@
 class SpecialPasswordReset extends FormSpecialPage {
 
        public function __construct() {
-               parent::__construct( 'PasswordReset' );
+               parent::__construct( 'PasswordReset', 'resetpassword' );
        }
 
        public function userCanExecute( User $user ) {