I am currently creating a mediawiki where there are administrators and writers, and everyone else in the project only needs read access. Our current approach is having all the read-only users share a same login for accessibility. How can I ensure that this user is not able to change its own password?

  • 1
    You might do better to ask in a MediaWiki forum.
    – Steve
    May 23, 2020 at 23:36

1 Answer 1


Sounds like you are better served by a HTTP password. That said, you can take away their editmyprivateinfo right to prevent changing passwords (and user preferences in general).

  • I can vouch for this approach. I had good luck using Extension:Auth_remoteuser for this. The authentication/authorization was handled by the Apache web server, using AuthType Basic directives, and Extension:Auth_remote user just looks for the REMOTE_USER environment variable set by Apache.
    – Kevin E
    Aug 26, 2021 at 6:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.