INFO ACL - the access control list system DESCRIPTION ACL stands for Access Control List, and is a way to control what access a given LPC object or wizard can have to filesystem objects like directories and files. The following access rights are defined and implemented: P Protect, can modify ACLs D Delete, can delete filesystem objects A Add, can create filesystem objects L List, can get a directory listing R Read, can read files W Write, can write to already existing files The following access rights are defined but not implemented: U Use, (not currently implemented) X eXecute, can clone&load objects (not yet implemented) Two abbreviations also exists, ALL is all the above rights, and NONE is none of the above rights. Access can be given to a number of types of "objects", for example: Lpd A wizard (interactive player really). /obj/rope An LPC object. /room/ All objects in the /room directory (as well as subdirs). .ArchWiz All "objects" in the .ArchWiz group. .Lpd.GuildFoo All "objects" in Lpd's .GuildFoo group. $REST A "catchall". An ACL can look something like this: Lpd:ALL (Lpd have ALL rights) Oros:LUR (Oros have List, Use and Read rights) /players/lpd/:ALL (All objects in ~lpd/ have ALL rights) $REST:NONE (All other "objects" have no rights) One thing to notice is that if there isn't an ACL assigned to a filesystem object then the rights will be inherited from the nearest parent directory to that object. So if you have an ACL assigned to your home directory then the access rights specified in it will automatically apply to all your subdirs and files (unless you assign another ACL to one of the subdirs or files of course). For more information about how to view ACLs, see the "list_access" command (abbreviation "lac"). To assign and modify ACLs, see the "set_access" (abbreviation "sac") and "edit_access" ("edac") commands. Author: Peter Eriksson, 15 Oct 1993. NOTE The $REST acts as a minimum acl; if you have an acl like Bastard:NONE $REST:LR the wizard 'bastard' will still get LR rights. Beware of giving rights to /obj, /local, etc; then anyone can clone wiztools from there and do whatever to your files. Beware that the .acl file can be modified by ftp. SEE ALSO w/list_access, w/set_access, w/edit_access
Help topics available:
Syntax | acl | admin | ange-ftp | blocker |
concept | damage_types | disk | feelings | ftp |
quality | tasks | terrain | wizard | wizline |
wizlevels | wizsoul | wiztool |
You are guest number 152 since November 2019.
This file was last modified: June 2000.