Ulysses

Ulysses Stuff => General Chat & Help and Support => Topic started by: sabo on June 09, 2013, 02:54:56 PM

Title: Adduser interferes with can_target
Post by: sabo on June 09, 2013, 02:54:56 PM

I have set a couple groups up, this time I kept superadmin highest due to the thread president made :D

I have a group called "Member", everyone can join it by registering on Forums.

I have not made it automatically sync it so the staff has to set them to Member.

Every staff - Mod/admin/ect.. - can set people to Member.

My problem: A trial Moderator can set a superadmin to Member. lol

Basically everyone with the access to adduser can sett everyone else to the whitelisted groups (in this case only member).

Lower ranks can target higher ranks which should not be the case.

I made each rank inherit from the lower one ? user<member<vip<trialmod<mod<premiumadmin<trialadmin<admin<superadmin

I hope you can help me out in this.

Title: Re: Adduser interferes with can_target
Post by: JamminR on June 09, 2013, 08:01:23 PM

For each lower group, you need to set !%<higher_group_name1>,!%<higher_group_name2>,... in the can_target field.
! = not, %=group
Additionally, if you have your higher groups inherit moderator, and it is the only group with adduser in it, they too will inherit it's restrictions. You'll need to give a higher group the adduser command without restrictions.

See also this old but still relevant explanation of can target.
http://forums.ulyssesmod.net/index.php/topic,4314.msg16844.html#msg16844

Title: Re: Adduser interferes with can_target
Post by: sabo on June 10, 2013, 08:33:08 AM

Did I underant this right:
I have 5 groups, group1,group2....

group1 can not target group2 if I do this: !%group2 - but group1 can still target group3/4/5 ?

How would I make it so lets say Admin can set Users to Member but can not set Moderator/operators to member?

Title: Re: Adduser interferes with can_target
Post by: Megiddo on June 10, 2013, 10:12:02 AM

Quote from: sabo on June 10, 2013, 08:33:08 AM

How would I make it so lets say Admin can set Users to Member but can not set Moderator/operators to member?

Only half of this is possible in the current ULX implementation, sorry. Our suggested solution is to only give powerful commands (like add user) to those you know you can trust.

Title: Re: Adduser interferes with can_target
Post by: sabo on June 11, 2013, 01:12:44 PM

Quote from: Megiddo on June 10, 2013, 10:12:02 AM

Only half of this is possible in the current ULX implementation, sorry. Our suggested solution is to only give powerful commands (like add user) to those you know you can trust.

Thanks Ill do that then.

Just out of curiosity, are you working on this?

Title: Re: Adduser interferes with can_target
Post by: Megiddo on June 11, 2013, 01:18:57 PM

Quote from: sabo on June 11, 2013, 01:12:44 PM

Thanks Ill do that then.

Just out of curiosity, are you working on this?

No. We assume that admins trust users given access to the more powerful commands. Supporting what you want to do would be very complex for little gain (at least from our point of view).

Title: Re: Adduser interferes with can_target
Post by: JamminR on June 11, 2013, 07:54:49 PM

Sabo, you could write your own ULX command that would/could only affect one group to change to another group.
I believe there may even be previous discussion somewhere hear on the forums where someone did that.
Sorry, i don't have time to search for it.

Title: Re: Adduser interferes with can_target
Post by: sabo on June 12, 2013, 09:00:09 AM

Thanks for the answers guys, I appreciate it.