Thread:User talk:Tmtoulouse/Enforcing desysopping by a moderator

With $wgRevokePermissions you could set up a group that revokes all the sysop rights and make it so only mods can add and remove it. Then it wouldn't matter if another sysop undid the desysopping, because the revoking group would override the sysop rights.

So for example:

The only problem is that I don't think you can prevent the user from changing user rights, since sysops don't have the full userrights right, their ability to make people sysops is governed by $wgAddGroups and $wgRemoveGroups, and I don't think there's a way to revoke that with a second group.