Administradores de sistema
| Por razões legais e de segurança, a Fundação Wikimedia decidiu exigir autenticação de dois fatores para esta função. |
Os administradores de sistema executam o trabalho de administração de sistemas nos servidores da Wikimedia. A sua principal tarefa é a de assegurar que a coleção de mais de 900 wikis da Fundação continua a funcionar sem problemas, de modo que os utilizadores possam continuar a ler e a alterar as páginas. Além de manter o hardware e o software nos clusters do servidor da Wikimedia, são responsáveis por atualizar e configurar a versão do software MediaWiki que é executado nos servidores da Wikimedia, e podem ainda executar tarefas administrativas que exijam acesso direto ao servidor ou à base de dados, tais como criar novas wikis, encerrar wikis, alterar definições de configuração, etc.
A Fundação Wikimedia controla legalmente os servidores; em última análise, o Conselho de Curadores da Fundação Wikimedia é responsável por determinar quem tem acesso sysadmin (administrador de sistema), e como essa responsabilidade é exercida. No entanto, este poder é delegado a vários gestores da Fundação Wikimedia. No dia-a-dia, vários administradores de sistemas com acesso root ou shell administram os clusters de servidores.
Ações dos administradores de sistema
Embora os administradores do sistema nem sempre estejam ativos nas suas próprias wikis da Wikimedia, podem, ocasionalmente, precisar realizar ações por razões técnicas, tais como bloqueios de usuários ou bots que estão consumindo quantidades inaceitáveis de recursos do sistema, ou desfazendo edições que colocam forte pressão sobre os servidores. Tais ações não deve ser desfeitas sem se consultar o administrador do sistema.
To facilitate these changes being made in a transparent fashion, all system administrators who ask can be added to the 'sysadmin' global group (automatic members lists). This group allows them to set user rights for any user on any wiki, in the same fashion as stewards. So if a system administrator needs to perform an action restricted to administrators (like editing system messages) on a particular wiki, they can simply grant themselves admin status on that wiki to make the action. In addition, the 'sysadmin' group has access to Special:GlobalGroupPermissions, where system administrators can change the permissions assigned to their global group. So as an alternative, the system administrator could add editinterface to the global group permissions, and would then be able to edit system messages on all wikis.
System administrators are encouraged to use the latter method of granting permissions, to avoid the lists of administrators/bureaucrats on local wikis becoming cluttered with users who are not 'permanent' members of those groups. These self-promotions may be removed at any time by stewards, as they can be easily restored if needed. However, some system administrators have permissions on certain wikis as a result of due process on that wiki, for instance Tim Starling's adminship on English Wikipedia; such rights should not be removed in this fashion.
Requesting on-wiki access
Approving the on-wiki sysadmin global group to any account (staff and volunteers) is the responsibility of the Trust and Safety team in consultation with Legal at the Foundation. Not all system administrators have this permission. The on-wiki permission can be given to those who already have relevant permission/access in Wikimedia’s technical spaces (i.e. shell access) and can demonstrate a need of doing related on-wiki changes in order to better support the communities.
- The requester needs to submit their request on the Steward requests/Global permissions Meta page. After submitting the request on Meta, the requester needs to send a note with a detailed use case (i.e. what do you need the rights for?) to Trust and Safety through ca
wikimedia.org for approval. - Once approved by the Legal department, one of the members from the Trust and Safety team will coordinate with the Stewards and will confirm the approval on the Meta request page.
- Once the approval from the Foundation is secured, the Stewards ensure that the 2FA requirement for the user account is met and grant the rights.
- The Stewards will remove the rights if the user wishes to resign and/or loses access to the server, Foundation asks for removal, or in case of abuse and in an emergency situation (i.e. account compromised).
Lista
There are various levels of shell access (through user groups) and many (whether or not overlapping) groups of servers that access is granted to. The canonical list of users with access to the servers is maintained in the Git repository that hosts the Puppet configuration used to configure the servers.
Users in the restricted, deployment, or ops groups (and by extension the release-engineering group which is included by reference) have sysadmin access to the servers running MediaWiki itself.
História
Initially, it was Jimmy Wales who installed software, ran update programs, etc., on the servers. In March 2002, he proposed to give login accounts to some developers ("Trusted user access to machine", Wikitech-l).
System administrators formerly had an important role in the Wikipedia power structure, since they were the only ones able to promote and demote sysops and lock user accounts (before the "block" feature of MediaWiki existed).
Consulte também
- Administradores de sistema : permissão global · grupos globais (toolforge) · lista de membros · registro de alteração do grupo
- Grupos globais