Hi,
A misbehaving bureaucrat has abused the bureaucrat rights and he’s added himself to the administration group and removed every log entry on my wiki and I can’t restore it (the checkbox is greyed out).
My wiki’s URL: http://os-install-guides.16mb.com/wiki/Main_Page
MediaWiki 1.26.2
PHP 7.0.5
Your wiki cannot be accessed currently, all it says is "Access denied".
There are several things to talk about:
A bureaucrat _should_ be able to add and remove groups from users. This right can be restricted to certain groups, but it comes down to this: It is a question of trust that a bureaucrat does not abuse these rights. If this user is not trusted, then he should be removed from the bureaucrat group.
Furthermore, you will need database access in order to remove the complete MediaWiki logs. If the user "only" is a MediaWiki bureaucrat, then there is no way how he could remove log entries. He then can grant user rights through the MediaWiki interface and these actions will be logged. That is all.
I was just able to view your logs. The user in question deleted a number of pages and has hidden certain log information using the revision delete functions of MediaWiki. Looks like you had a vandalizing bureaucrat.
According to the Special:ListUsers page, it seems like you could fix the problem, right? The deleted pages are restored, the user is blocked and apart from him there only is one bureaucrat user now, who is called Admin.
I appreciate your help!
Your wiki cannot be accessed currently, all it says is "Access denied".
Where does it say so? It works fine for me.
A bureaucrat _should_ be able to add and remove groups from users. This right can be restricted to certain groups, but it comes down to this: It is a question of trust that a bureaucrat does not abuse these rights.
Yeah I realised that after making the mistake.
If this user is not trusted, then he should be removed from the bureaucrat group.
I already did that.
Furthermore, you will need database access in order to remove the complete MediaWiki logs.
I know.
If the user "only" is a MediaWiki bureaucrat, then there is no way how he could remove log entries. He then can grant user rights through the MediaWiki interface and these actions will be logged. That is all.
I was just able to view your logs. The user in question deleted a number of pages and has hidden certain log information using the revision delete functions of MediaWiki. Looks like you had a vandalizing bureaucrat.
That’s EXACTLY what he did!
According to the Special:ListUsers page, it seems like you could fix the problem, right? The deleted pages are restored, the user is blocked and apart from him there only is one bureaucrat user now, who is called Admin.
Yeah I almost fixed the changes.
However I can’t unhide the deleted logs. The checkboxes are greyed out.
I’m glad my wiki prevents guest editing!
The page which you linked only showed a white page saying "Access denied". It is working for me now as well.
The information how log entries can be unhidden again belongs to Help:RevisionDelete. I have not used these features previously myself, but you need the "deleterevision" or also the "suppressrevision" right.
If it is not possible through the MediaWiki interface, you should be able to undo these changes in the database: Check the database table log: The according log entries will have a value in their log_deleted field. Setting this value back to "0" should make the hidden information visible again.
In case of deleted revisions see the rev_deleted field in the revision table.
Hey, adding the ‘suppressrevision’ right helped! Thanks!
Help, I’m stuck! The vandaliser’s deleted some logs and I don’t know how to get it back!
See my last response: I would just change the value in the log_deleted and rev_deleted fields in the database.
