INFO
ACL - the access control list system
DESCRIPTION
ACL stands for Access Control List, and is a way to control what
access a given LPC object or wizard can have to filesystem objects
like directories and files.
The following access rights are defined and implemented:
P Protect, can modify ACLs
D Delete, can delete filesystem objects
A Add, can create filesystem objects
L List, can get a directory listing
R Read, can read files
W Write, can write to already existing files
The following access rights are defined but not implemented:
U Use, (not currently implemented)
X eXecute, can clone&load objects (not yet implemented)
Two abbreviations also exists, ALL is all the above rights, and NONE
is none of the above rights.
Access can be given to a number of types of "objects", for example:
Lpd A wizard (interactive player really).
/obj/rope An LPC object.
/room/ All objects in the /room directory (as well as
subdirs).
.ArchWiz All "objects" in the .ArchWiz group.
.Lpd.GuildFoo All "objects" in Lpd's .GuildFoo group.
$REST A "catchall".
An ACL can look something like this:
Lpd:ALL (Lpd have ALL rights)
Oros:LUR (Oros have List, Use and Read rights)
/players/lpd/:ALL (All objects in ~lpd/ have ALL rights)
$REST:NONE (All other "objects" have no rights)
One thing to notice is that if there isn't an ACL assigned to a
filesystem object then the rights will be inherited from the nearest
parent directory to that object. So if you have an ACL assigned to
your home directory then the access rights specified in it will
automatically apply to all your subdirs and files (unless you assign
another ACL to one of the subdirs or files of course).
For more information about how to view ACLs, see the "list_access"
command (abbreviation "lac"). To assign and modify ACLs, see the
"set_access" (abbreviation "sac") and "edit_access" ("edac") commands.
Author: Peter Eriksson , 15 Oct 1993.
NOTE
The $REST acts as a minimum acl; if you have an acl like
Bastard:NONE
$REST:LR
the wizard 'bastard' will still get LR rights.
Beware of giving rights to /obj, /local, etc; then anyone can clone
wiztools from there and do whatever to your files.
Beware that the .acl file can be modified by ftp.
SEE ALSO
w/list_access, w/set_access, w/edit_access
Help topics available:
| Syntax | acl | admin | ange-ftp | blocker |
| concept | damage_types | disk | feelings | ftp |
| quality | tasks | terrain | wizard | wizline |
| wizlevels | wizsoul | wiztool |
You are guest number 190 since November 2019.
This file was last modified: June 2000.