Adduser interferes with can_target

[sabo]

I have set a couple groups up, this time I kept superadmin highest due to the thread president made

I have a group called "Member", everyone can join it by registering on Forums.

I have not made it automatically sync it so the staff has to set them to Member.

Every staff - Mod/admin/ect.. - can set people to Member.

My problem: A trial Moderator can set a superadmin to Member. lol

Basically everyone with the access to adduser can sett everyone else to the whitelisted groups (in this case only member).

Lower ranks can target higher ranks which should not be the case.

I made each rank inherit from the lower one ? user<member<vip<trialmod<mod<premiumadmin<trialadmin<admin<superadmin

I hope you can help me out in this.

[JamminR]

For each lower group, you need to set !%<higher_group_name1>,!%<higher_group_name2>,... in the can_target field.
! = not, %=group
Additionally, if you have your higher groups inherit moderator, and it is the only group with adduser in it, they too will inherit it's restrictions. You'll need to give a higher group the adduser command without restrictions.

See also this old but still relevant explanation of can target.
http://forums.ulyssesmod.net/index.php/topic,4314.msg16844.html#msg16844

[sabo]

Did I underant this right:
I have 5 groups, group1,group2....

group1 can not target group2 if I do this: !%group2 - but group1 can still target group3/4/5 ?

How would I make it so lets say Admin can set Users to Member but can not set Moderator/operators to member?

[Megiddo]

How would I make it so lets say Admin can set Users to Member but can not set Moderator/operators to member?

Only half of this is possible in the current ULX implementation, sorry. Our suggested solution is to only give powerful commands (like add user) to those you know you can trust.

[sabo]

Only half of this is possible in the current ULX implementation, sorry. Our suggested solution is to only give powerful commands (like add user) to those you know you can trust.

Thanks Ill do that then.

Just out of curiosity, are you working on this?

[Megiddo]

Thanks Ill do that then.

Just out of curiosity, are you working on this?

No. We assume that admins trust users given access to the more powerful commands. Supporting what you want to do would be very complex for little gain (at least from our point of view).

[JamminR]

Sabo, you could write your own ULX command that would/could only affect one group to change to another group.
I believe there may even be previous discussion somewhere hear on the forums where someone did that.
Sorry, i don't have time to search for it.

[sabo]

Thanks for the answers guys, I appreciate it.