Author Topic: ulx groupdeny/allow  (Read 3589 times)

0 Members and 1 Guest are viewing this topic.

Offline dpoolas

  • Newbie
  • *
  • Posts: 15
  • Karma: 0
ulx groupdeny/allow
« on: March 31, 2010, 06:03:35 AM »
Ok my problem is whenever i ulx groupdeny admin "ulx unban" lets say i used that for some reason it restricts it for superadmins too which i am not understanding at all. Also what is weird is when i put ulx groupallow superadmin "ulx unban" it doesn't do anything can anyone help me with this issue

Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6214
  • Karma: 394
  • Project Lead
Re: ulx groupdeny/allow
« Reply #1 on: March 31, 2010, 08:05:31 AM »
As with most access control systems, a deny is stronger than an allow. Simply remove "ulx unban" from the allow list for admins and add it to the allow list for superadmins, using the ulx groupallow command.
Experiencing God's grace one day at a time.

Offline MrPresident

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 2728
  • Karma: 430
    • |G4P| Gman4President
Re: ulx groupdeny/allow
« Reply #2 on: March 31, 2010, 11:38:19 AM »
To break it down just a bit further... "Barney Style" as we call it in the Military...

If you deny someone something AND you allow them it too.. the deny will take priority.


Superadmin inherits admin.. this means that everything you allow an admin (and subsequently deny them) will also allow/deny for superadmin as well.


The BEST way to structure your admin/superadmin allows is as follows.



<admin>
<allow>
EVERYTHING you want both Admin and Superadmin to have.. KEY WORD.. BOTH!!!
</allow>
</admin>

Do not deny ANYTHING to admin unless you want it to be denied to superadmin as well.. this is good for console only commands. Console being server console.


<superadmin>
<allow>
Things you ONLY want superadmin to have that you didn't include in the admin list.
</allow>
</superadmin>


NOTE: I see this all the time.. THERE IS NO REASON to allow things to BOTH admin and superadmin in the allow/deny file for ULX. Everything admin can do.. superadmin can do too..

Offline JamminR

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 8096
  • Karma: 390
  • Sertafide Ulysses Jenius
    • Team Ulysses [ULib/ULX, other fine releases]
Re: ulx groupdeny/allow
« Reply #3 on: March 31, 2010, 04:14:17 PM »
And yet one more step further if you don't wish to manually edit files like MrPresident suggested.
You revoke/remove access (like Megiddo suggested) by adding a "1" to the end of the groupallow command.
For instance of what you're trying to do.
ulx groupallow admin "ulx unban" 1 - removes ulx unban from admin group.
ulx groupallow superadmin "ulx unban" - gives the formerly inherited in admin group "ulx unban" to the superadmin group.
"Though a program be but three lines long, someday it will have to be maintained." -- The Tao of Programming

Offline dpoolas

  • Newbie
  • *
  • Posts: 15
  • Karma: 0
Re: ulx groupdeny/allow
« Reply #4 on: March 31, 2010, 04:43:13 PM »
thats the weird thing i take away the commands for admin but it still wont let me add it to super something is totally messed up

Offline JamminR

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 8096
  • Karma: 390
  • Sertafide Ulysses Jenius
    • Team Ulysses [ULib/ULX, other fine releases]
Re: ulx groupdeny/allow
« Reply #5 on: March 31, 2010, 05:24:20 PM »
What errors?
Also, Since you'd already denied the command to admins, it may not let you add it to superadmins until that deny is removed.
Try;
ulx groupdeny admin "ulx unban" 1
I _think_ that should remove the deny from admins. (Someone can correct me if I'm wrong.)
"Though a program be but three lines long, someday it will have to be maintained." -- The Tao of Programming

Offline dpoolas

  • Newbie
  • *
  • Posts: 15
  • Karma: 0
Re: ulx groupdeny/allow
« Reply #6 on: March 31, 2010, 06:25:38 PM »
found out xenon servers does not let you mess with anything superadmin with it unless you directly edit through ftp well atleast my server has some protection

Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6214
  • Karma: 394
  • Project Lead
Re: ulx groupdeny/allow
« Reply #7 on: March 31, 2010, 06:46:30 PM »
What errors?
Also, Since you'd already denied the command to admins, it may not let you add it to superadmins until that deny is removed.
Try;
ulx groupdeny admin "ulx unban" 1
I _think_ that should remove the deny from admins. (Someone can correct me if I'm wrong.)

That's right. :)
Experiencing God's grace one day at a time.