Restrict a Wiki to Administrators

Last modified by Eleni Cojocariu on 2026/10/19 22:03

Steps

Close a wiki to everyone but its administrators, registered users included. The rights are allowed to the administrators alone, which, as Rights Resolution explains, refuses them to everyone the wiki does not name.

  1. Administer your wiki.
  2. Select "Users & Rights", and then "Rights".
  3. On the "Groups" tab, allow XWikiAdminGroup "View" and "Register" (a wiki in its installed state already grants it the others) and clear every right of XWikiAllGroup, the way Set the Rights of a Wiki describes.

    The rights grid of the wiki administration, with every right allowed for XWikiAdminGroup and none for XWikiAllGroup

  4. Select the two check boxes below the grid, "Prevent unregistered users from viewing pages, regardless of the page rights" and the one for editing, so that no page can let a visitor in, as Restrict the Wiki to Registered Users describes.

    The two selected check boxes preventing unregistered users from viewing and editing pages

  5. Sign in as a registered user who is not an administrator, and check that the wiki refuses them.

    The error telling a signed-in user that they are not allowed to view this page

FAQ

Why clear the rights of XWikiAllGroup?

A right allowed to the registered users stays allowed to all of them, whatever the administrators are granted beside it. Clearing that row leaves the rule naming the administrators as the only one.

Must I allow "Register" as well?

Only if new accounts should stop being created: without it anyone may still register, which is the separate setting Close the Registration of a Wiki covers.

Can I lock myself out?

Not while your account belongs to XWikiAdminGroup, since the rights are allowed to that group. An administrator who is not a member of it loses the wiki along with everyone else.

Related

Get Connected