Draft:Protection policy
The following is a proposed AARoads Wiki policy, guideline, or process. The proposal may still be in development, under discussion. |
Icon | Mode |
---|---|
Silver | Semi-protected |
Gold | Fully protected |
Green | Move protected |
Skyblue | Create protected |
Purple | Upload protected |
Turquoise | Cascade protected |
Black | Protected by Alex |
In some circumstances, pages may need to be protected from modification by certain groups of editors. Pages are protected when there is disruption that cannot be prevented through other means such as blocks. The AARoads Wiki is built on the principle that anyone with an account can edit and therefore aims to have as many pages as possible open for public editing so that anyone can add material and correct errors. This policy states in detail the protection types and procedures for page protection and unprotection and when each protection should and should not be applied.
Protection is a technical restriction applied only by administrators, although any user may request protection. Protection can be indefinite or expire after a specified time. The various levels of protection are detailed below, and they can be applied to the page edit, page move, page create, and file upload actions. Even when a page is protected from editing, the source code (wikitext) of the page can still be viewed and copied by anyone.
A protected page is marked at its top right by a padlock icon, usually added by the {{pp}}
template.
Preemptive protection
Applying page protection solely as a preemptive measure is contrary to the open nature of wikis and is generally not allowed. Instead, protection is used when vandalism, disruption, or abuse by multiple users is occurring at a frequency that warrants protection. The duration of protection should be as short as possible and at the lowest protection level sufficient to stop the disruption, allowing edits from as many productive users as possible.
Exceptions include the Main Page, along with its templates and images, which are indefinitely fully protected.
Requesting protection
Protection types
The following protection types are available to administrators for protecting different actions to pages:
- Edit protection protects the page from being edited.
- Move protection protects the page from being moved or renamed.
- Creation protection prevents a page from being created (also known as "salting").
- Upload protection prevents new versions of a file from being uploaded, but it does not prevent editing of the file's description page (unless edit protection is applied).
Protection levels
The following protection levels are available to administrators for adding protection to the different actions to pages:
- Semi-protection prevents the action by unregistered users and users with accounts that are not confirmed.
- Full protection prevents the action by everyone except administrators.
Submitting requests
Any of the above protections can be requested at The Interchange. Changes to a protected page should be proposed on the corresponding talk page, and then (if necessary) requested by adding an edit request. From there, if the requested changes are uncontroversial, the changes can be carried out by a user who can edit the page.
Except in the case of office actions or pages in the MediaWiki namespace (see below), administrators may unprotect a page if the reason for its protection no longer applies, a reasonable period has elapsed, and there is no consensus that continued protection is necessary. Users can request unprotection or a reduction in protection level by asking the administrator who applied the protection on the administrator's user talk page. If the administrator is inactive, no longer an administrator, or does not respond, then a request can be made at The Interchange.
A log of protections and unprotections is available at Special:Log/protect.
Protection levels
Each of these levels is explained in the context of edit protection, but each can be applied to other types of protection except for pending changes.
Semi-protection
Semi-protected pages like this page cannot be edited by accounts that are not confirmed or autoconfirmed (accounts that are at least 4 days old with at least 10 edits). Semi-protection is useful when there is a significant amount of disruption or vandalism from new or unregistered users, or to prevent sockpuppets of blocked or banned users from editing.
Such users can request edits to a semi-protected page by proposing them on its talk page, using the {{Edit semi-protected}} template if necessary to gain attention. If the page in question and its talk page are both protected, the edit request should be made at The Interchange instead.
Guidance for administrators
Semi-protection should not be used as a preemptive measure against vandalism that has not yet occurred or to privilege registered users over unregistered users in (valid) content disputes.
Administrators may apply temporary semi-protection on pages that are:
- Subject to significant but temporary vandalism or disruption (for example, due to media attention) if blocking individual users is not a feasible option.
- Subject to edit warring if all parties involved are unregistered or new editors. This does not apply when autoconfirmed users are involved.
- Subject to vandalism or edit warring.
- Article discussion pages, if they have been subject to persistent disruption. Such protection should be used sparingly because it prevents newly registered users from participating in discussions.
- Protection should be used sparingly on the talk pages of blocked users. Instead the user should be re-blocked with talk page editing disallowed. When required, or when re-blocking without talk page editing allowed is unsuccessful, protection should be implemented for only a brief period not exceeding the duration of the block.
In addition, administrators may apply indefinite semi-protection to pages that are subject to heavy and persistent vandalism or violations of content policy.
A page and its talk page should not normally be protected at the same time. In exceptional cases, if a page and its talk page are both protected, the talk page should direct affected editors to The Interchange through the use of a non-iconified page protection template, to ensure that no editor is entirely prevented from contributing.
Full protection
A fully protected page cannot be edited or moved by anyone except administrators.
Modifications to a fully protected page can be proposed on its talk page (or at another appropriate forum) for discussion. Administrators can make changes to the protected article reflecting consensus. Placing the {{Edit fully-protected}}
template on the talk page will draw the attention of administrators for implementing uncontroversial changes.
Content disputes
While content disputes and edit warring can be addressed with user blocks issued by uninvolved administrators, allowing normal page editing by other editors at the same time, the protection policy provides an alternative approach as administrators have the discretion to temporarily fully protect an article to end an ongoing edit war. This approach may better suit multi-party disputes and contentious content, as it makes talk page consensus a requirement for implementation of requested edits. When protecting a page because of a content dispute, administrators have a duty to avoid protecting a version that contains policy-violating content, such as vandalism, copyright violations, or defamation. Administrators are deemed to remain uninvolved when exercising discretion on whether to apply protection to the current version of an article, or to an older, stable, or pre-edit-war version.
Fully protected pages may not be edited except to make changes that are uncontroversial or for which there is clear consensus. Editors convinced that the protected version of an article contains policy-violating content, or that protection has rewarded edit warring or disruption by establishing a contentious revision, may identify a stable version prior to the edit war and request reversion to that version. Before making such a request, editors should consider how independent editors might view the suggestion and recognize that continuing an edit war is grounds for being blocked.
Administrators who have made substantive content changes to an article are considered involved and must not use their advanced permissions to further their own positions. When involved in a dispute, it is almost always wisest to respect the editing policies that bind all editors and call for input from an uninvolved administrator, rather than to invite controversy by acting unilaterally.
"History only" review
If a deleted page is going through deletion review, only administrators are normally capable of viewing the former content of the page. If they feel it would benefit the discussion to allow other users to view the page content, administrators may restore the page, blank it or replace the contents with {{Temporarily undeleted}}
template or a similar notice, and fully protect the page to prevent further editing. The previous contents of the page are then accessible to everyone via the page history.
Protected generic file names
Generic file names such as File:Photo.jpg, File:Example.jpg, File:Map.jpg, and File:Sound.wav are fully protected to prevent new versions from being uploaded. Furthermore, File:Map.jpg and File:Sound.wav are salted.
Protection types
Edit protection
Edit protection restricts editing of a page, often due to vandalism or disputes, ensuring only experienced users can make changes (see above for more information).
Creation protection (salting)
Administrators can prevent the creation of pages. This type of protection is useful for pages that have been deleted but repeatedly recreated. Such protection is case-sensitive. There are several levels of creation protection that can be applied to pages, identical to the levels for edit protection. A list of protected titles can be found at Special:ProtectedTitles (see also historical lists).
Preemptive restrictions on new article titles are instituted through the title blacklist system, which allows for more flexible protection with support for substrings and regular expressions.
Pages that have been creation-protected are sometimes referred to as "salted". Editors wishing to re-create a salted title with appropriate content should either contact an administrator (preferably the protecting administrator), file a request at Wikipedia:Requests for page protection § Current requests for reduction in protection level, or use the deletion review process. To make a convincing case for re-creation, it is helpful to show a draft version of the intended article when filing a request.
Create protection of any duration may be applied to pages being repeatedly recreated in violation of policy using the lowest protection level sufficient to stop the disruption.
While creation-protection is usually permanent, temporary creation protection can be applied if a page is repeatedly recreated by a single user (or sockpuppets of that user, if applicable).
Move protection
Move-protected pages, or more technically, fully move-protected pages, cannot be moved to a new title except by an administrator. Move protection is commonly applied to:
- Pages subject to persistent page-move vandalism.
- Pages subject to a page-name dispute.
- Highly visible pages that have no reason to be moved, such as the The Interchange.
Move protection of any duration may be applied to pages being repeatedly moved in violation of policy using the lowest protection level sufficient to stop the disruption (extended-confirmed or full). Non-confirmed editors cannot move pages so semi-move protection has no effect.
Fully edit-protected pages are also implicitly move-protected.
As with full edit protection, protection because of edit warring should not be considered an endorsement of the current name. When move protection is applied during a requested move discussion, the page should be protected at the location it was at when the move request was started.
All files and categories are implicitly move-protected, requiring administrators to rename files or categories.
Upload protection
Upload-protected files, or more technically, fully upload-protected files, cannot be replaced with new versions except by an administrator. Upload protection does not protect file pages from editing. It can be applied by an administrator to:
- Files subject to persistent upload vandalism.
- Files subject to a dispute between editors.
- Files that should not be replaced, such as images used in the interface or transcluded to the main page.
- Files with common or generic names. (e.g., File:map.png)
As with full edit protection, administrators should avoid favoring one version over another, and protection should not be considered an endorsement of the current version. An exception to this rule is when they are protected due to upload vandalism.
Uncommon protections
Cascading protection
Cascading protection fully protects a page, and extends that full protection automatically to any page that is transcluded onto the protected page, whether directly or indirectly. This includes templates, images and other media that are hosted on the English Wikipedia. Files stored on Commons are not protected by any other wiki's cascading protection and, if they are to be protected, must be either temporarily uploaded to the English Wikipedia or explicitly protected at Commons (whether manually or through cascading protection there). Cascading protection:
- Should be used only to prevent vandalism when placed on particularly visible pages, such as the main page.
- Is available only for fully protected pages; it is disabled for lower levels of protection as it represents a workflow flaw. See below for more information.
- Is not instantaneous; it can be several hours before it takes effect.
- Should generally not be applied directly to templates or modules, as it will not protect transclusions inside
<includeonly>
tags or transclusions that depend on template parameters, but will protect the documentation subpage.
Permanent protection
Administrators cannot change or remove the protection for some areas on Wikipedia, which are permanently protected by the MediaWiki software:
- Edits to the MediaWiki namespace, which defines parts of the site interface, are restricted to [[AARoads:Administrators|administrators and interface administrators.
- Edits to system-wide CSS and JavaScript pages such as MediaWiki:common.js are further restricted to interface administrators.
- Edits to personal CSS and JavaScript pages such as User:Example/monobook.css and User:Example/vector-2022.js are restricted to the associated user and interface administrators. Interface administrators may edit these pages, for example, to remove a user script that has been used inappropriately. Administrators may delete (but not edit or restore) these pages.
- Edits to personal JSON pages such as User:Example/data.json are restricted to the associated user and administrators.
Such protection is called permanent or indefinite protection, and interface protection in the case of CSS and JavaScript pages.
In addition to hard-coded protection, the following are usually fully protected for an indefinite period of time (though not necessarily with interface protection):
- Very visible pages, such as the Main Page.
- Pages that should not be modified for legal reasons, such as the general disclaimer.
- Pages that are very frequently transcluded, such as
{{tl}}
or{{citation needed}}
, to prevent vandalism or denial of service attacks. This includes images or templates used in other highly visible or frequently transcluded pages.
Office actions
Pages can be protected by Alex or an appointed AARoads staff member in response to issues such as copyright infringement or libel. Such actions override community consensus. Administrators should not edit or unprotect such pages without permission from Alex.
Protection by namespace
Article talk pages
Modifications to a protected page can be proposed on its talk page (or at another appropriate forum) for discussion. Administrators can make changes to the protected article reflecting consensus. Placing the {{Edit protected}}
template on the talk page will draw the attention of administrators for implementing uncontroversial changes.
Talk pages are not usually protected, and are semi-protected only for a limited duration in the most severe cases of disruption.
User talk pages
User talk pages are rarely protected. However, protection can be applied if there is severe vandalism or abuse. Users whose talk pages are protected may wish to have an unprotected user talk subpage linked conspicuously from their main talk page to allow good-faith comments from users that the protection restricts editing from.
A user's request to have their own talk page protected is not a sufficient rationale by itself to protect the page, although requests can be considered if a reason is provided.
Blocked users
Blocked users' user talk pages should not ordinarily be protected, as this interferes with the user's ability to contest their block through the normal process. It also prevents others from being able to use the talk page to communicate with the blocked editor.
In extreme cases of abuse by the blocked user, such as abuse of the {{unblock}} template, re-blocking the user with talk page access removed should be preferred over applying protection to the page. If the user has been blocked and with the ability to edit their user talk page disabled, they should be informed of this in a block notice, subsequent notice, or message, and it should include information and instructions for appealing their block off-wiki.
When required, protection should be implemented for only a brief period, not exceeding the duration of the block.
User pages of confirmed socks of registered users are not normally protected.
User pages
Base user pages (for example, the page User:Example, and not User:Example/subpage or User talk:Example) are automatically protected from creation or editing by unconfirmed accounts and anonymous IP users. An exception to this includes an unconfirmed registered account attempting to create or edit their own user page. Unconfirmed accounts are also unable to create or edit user pages that do not belong to a currently registered account.
User pages and subpages within their own user space can be protected upon a request from the user, as long as a need exists. Pages within the user space should not be automatically or preemptively protected without good reason or cause. Requests for protection specifically at uncommon levels can be granted if the user has expressed a genuine and realistic need.
When a filter is insufficient to stop user page vandalism, a user may choose to create a ".css" subpage (ex. User:Example/Userpage.css), copy all the contents of their user page onto the subpage, transclude the subpage by putting {{User:Example/Userpage.css}} on their user page, and then ask an administrator to fully protect their user page. Because user space pages that end in ".css" and ".js" are editable only by the user to which that user space belongs (and interface administrators), this will protect one's user page from further vandalism.
Deceased users
In the event of the confirmed death of a user, the user's user page (but not the user talk page) should be fully protected and left as-is as a memorial to that user.
Protection of templates
Highly visible templates – those used on a large number of pages or frequently substituted – are often edit protected based on the degree of visibility, type of use, content, and other considerations.
Protected templates should normally have the {{documentation}} template. It loads the unprotected /doc
page, so that non-admins and IP-users can edit the documentation, categories and interwiki links. It also automatically adds {{pp-template}} to protected templates, which displays a small padlock in the top right corner and categorizes the template as protected. Only manually add {{pp-template}} to protected templates that don't use {{documentation}} (mostly the flag templates).
Cascading protection should generally not be applied directly to templates, as it will not protect transclusions inside <includeonly>
tags or transclusions that depend on template parameters, but will protect the template's documentation subpage. Instead, consider any of the following:
- If the set of subtemplates is static (even if large), protect them using normal protection mechanisms.
- If the set of subtemplates is unbounded, use MediaWiki:Titleblacklist to protect all subtemplates using a particular naming format.
Note: All editnotice templates (except those in userspace) are already protected via MediaWiki:Titleblacklist. They can be edited by admins, template editors and page movers only.
Sandboxes
Sandboxes should not ordinarily be protected since their purpose is to let new users test and experiment with wiki syntax. Most sandboxes are automatically cleaned every 12 hours, although they are frequently overwritten by other testing users. Those who use sandboxes for malicious purposes, or to violate policies such as no personal attacks, civility, or copyrights, should instead be warned and/or blocked.
Available templates
The following templates can be added at the very top of a page to indicate that it is protected:
On redirect pages, use the {{Redirect category shell}} template, which automatically categorizes by protection level, below the redirect line. A protection template may also be added below the redirect line, but it will serve only to categorize the page, as it will not be visible on the page, and it will have to be manually removed when protection is removed.
See also
- MediaWiki:Protectedpagetext
- Special:ProtectedPages
- Special:ProtectedTitles
- Wikipedia:Edit lock
- Wikipedia:List of indefinitely protected pages
- Wikipedia:Requests for page protection
- Wikipedia:Rough guide to semi-protection
- Wikipedia:Make protection requests sparingly, an essay
- Wikipedia:Salting is usually a bad idea, an essay
- metawiki:Protected pages considered harmful
- metawiki:The Wrong Version
- Wikipedia:Protection policy/Padlocks