Differences

This shows you the differences between two versions of the page.

--- infra:services:wiki [2025/04/09 06:13] – marcusramberg
+++ infra:services:wiki [2025/07/26 12:38] (current) – [Admin rights] d404d_idp.hackeriet.no
@@ Line 6: / Line 6: @@
-This Wiki is running [[Dokuwiki|https://dokuwiki.org]] and is hosted on Blade.
+This Wiki is running [[https://dokuwiki.org|Dokuwiki]] and is hosted on Blade.
 ===== Backup =====
-The contents of the wiki is backed up automagically to the [[hackeriet/wiki Github repo||https://github.com/hackeriet/wiki/tree/main/meta]], using the [[gitbackend||https://github.com/woolfg/dokuwiki-plugin-gitbacked]] plugin. The wiki and repo could contain personal information, and the repo is therefore private with limited access granted across Hackeriet.
+The contents of the wiki is backed up automagically to the [[https://github.com/hackeriet/wiki/tree/main/meta|hackeriet/wiki Github repo]], using the [[https://github.com/woolfg/dokuwiki-plugin-gitbacked|gitbackend]] plugin. The wiki and repo could contain personal information, and the repo is therefore private with limited access granted across Hackeriet.
 ===== Login =====
-New users can use Github as login method to get edit permissions to the Wiki. The login to the main admin user is in hackerpass, and members can use that login to grant themselves more permissions as need be.
+New users can use Hacker-ID to log in without sharing PII. When this option is used, the changelog will only contain your Hacker-ID user account and UUID.
+You can also use Github as login method to get edit permissions to the Wiki. This makes changelogs retain your Github sign-in email address and real name.
+==== Admin rights ====
+The login to the main admin user is in hackerpass, and members can use that login to grant themselves more permissions as need be.
+Hacker-ID users can get admin rights assigned automatically by being members of the ''service-dokuwiki-admins'' group. Note that DokuWiki does not unassign groups from removed members; it only adds the group to users that are currently members.
+DokuWiki's way of handling groups means that every single IDP group gets assigned to the person on login, even those not relevant for DokuWiki. To combat this, DokuWiki instead reads a custom claim ''dokuwiki_groups'' from Hacker-ID which contains the following values:
+^ IDP group ^ Claim value ^
+| ''service-dokuwiki-users'' | ''user'' |
+| ''service-dokuwiki-admins'' | ''admin'' |
+| ''hackeriet-styret'' | ''styret'' |