Ulysses

Ulysses Stuff => General Chat & Help and Support => Topic started by: dpoolas on March 31, 2010, 06:03:35 AM

Title: ulx groupdeny/allow
Post by: dpoolas on March 31, 2010, 06:03:35 AM
Ok my problem is whenever i ulx groupdeny admin "ulx unban" lets say i used that for some reason it restricts it for superadmins too which i am not understanding at all. Also what is weird is when i put ulx groupallow superadmin "ulx unban" it doesn't do anything can anyone help me with this issue
Title: Re: ulx groupdeny/allow
Post by: Megiddo on March 31, 2010, 08:05:31 AM
As with most access control systems, a deny is stronger than an allow. Simply remove "ulx unban" from the allow list for admins and add it to the allow list for superadmins, using the ulx groupallow command.
Title: Re: ulx groupdeny/allow
Post by: MrPresident on March 31, 2010, 11:38:19 AM
To break it down just a bit further... "Barney Style" as we call it in the Military...

If you deny someone something AND you allow them it too.. the deny will take priority.


Superadmin inherits admin.. this means that everything you allow an admin (and subsequently deny them) will also allow/deny for superadmin as well.


The BEST way to structure your admin/superadmin allows is as follows.



<admin>
<allow>
EVERYTHING you want both Admin and Superadmin to have.. KEY WORD.. BOTH!!!
</allow>
</admin>

Do not deny ANYTHING to admin unless you want it to be denied to superadmin as well.. this is good for console only commands. Console being server console.


<superadmin>
<allow>
Things you ONLY want superadmin to have that you didn't include in the admin list.
</allow>
</superadmin>


NOTE: I see this all the time.. THERE IS NO REASON to allow things to BOTH admin and superadmin in the allow/deny file for ULX. Everything admin can do.. superadmin can do too..
Title: Re: ulx groupdeny/allow
Post by: JamminR on March 31, 2010, 04:14:17 PM
And yet one more step further if you don't wish to manually edit files like MrPresident suggested.
You revoke/remove access (like Megiddo suggested) by adding a "1" to the end of the groupallow command.
For instance of what you're trying to do.
ulx groupallow admin "ulx unban" 1 - removes ulx unban from admin group.
ulx groupallow superadmin "ulx unban" - gives the formerly inherited in admin group "ulx unban" to the superadmin group.
Title: Re: ulx groupdeny/allow
Post by: dpoolas on March 31, 2010, 04:43:13 PM
thats the weird thing i take away the commands for admin but it still wont let me add it to super something is totally messed up
Title: Re: ulx groupdeny/allow
Post by: JamminR on March 31, 2010, 05:24:20 PM
What errors?
Also, Since you'd already denied the command to admins, it may not let you add it to superadmins until that deny is removed.
Try;
ulx groupdeny admin "ulx unban" 1
I _think_ that should remove the deny from admins. (Someone can correct me if I'm wrong.)
Title: Re: ulx groupdeny/allow
Post by: dpoolas on March 31, 2010, 06:25:38 PM
found out xenon servers does not let you mess with anything superadmin with it unless you directly edit through ftp well atleast my server has some protection
Title: Re: ulx groupdeny/allow
Post by: Megiddo on March 31, 2010, 06:46:30 PM
What errors?
Also, Since you'd already denied the command to admins, it may not let you add it to superadmins until that deny is removed.
Try;
ulx groupdeny admin "ulx unban" 1
I _think_ that should remove the deny from admins. (Someone can correct me if I'm wrong.)

That's right. :)