Permissions (Server)

From OpenSimulator

(Difference between revisions)
Jump to: navigation, search
(God)
m (Robot: Cosmetic changes)
Line 9: Line 9:
 
On this page, each permission group is defined as a 'Set' - that is, who is within that set. A Set can contain other Sets.
 
On this page, each permission group is defined as a 'Set' - that is, who is within that set. A Set can contain other Sets.
  
==Region Master==
+
== Region Master ==
 
Due to historical reasons, The Region Master is called Master Avatar, Region Master or Region Owner interchangeably.
 
Due to historical reasons, The Region Master is called Master Avatar, Region Master or Region Owner interchangeably.
  
===Set===
+
=== Set ===
 
1/Region, specified in the region xml.
 
1/Region, specified in the region xml.
  
===Permissions===
+
=== Permissions ===
  
==Administrator==
+
== Administrator ==
 
Somebody set to administrate the content of a set of regions within an estate.
 
Somebody set to administrate the content of a set of regions within an estate.
  
===Set===
+
=== Set ===
 
* if (Region Owner is God) Region Owner
 
* if (Region Owner is God) Region Owner
 
* if (Grid Gods Allowed) GodLevel > 200
 
* if (Grid Gods Allowed) GodLevel > 200
 
* Estate Owner
 
* Estate Owner
  
===Permissions===
+
=== Permissions ===
  
==Estate Owner==
+
== Estate Owner ==
===Set===
+
=== Set ===
 
Specified in estate_settings
 
Specified in estate_settings
===Permissions===
+
=== Permissions ===
  
==God==
+
== God ==
 
A 'God' has a 'god level' - this concept is under development. The 'god' concept is a way to assign users trust levels, rather than incorporating them into a policy group like 'administrators' or 'estate managers'. See also [[Userlevel]]
 
A 'God' has a 'god level' - this concept is under development. The 'god' concept is a way to assign users trust levels, rather than incorporating them into a policy group like 'administrators' or 'estate managers'. See also [[Userlevel]]
===Set===
+
=== Set ===
 
Administrators
 
Administrators
===Permissions===
+
=== Permissions ===
  
==Estate Manager==
+
== Estate Manager ==
===Set===
+
=== Set ===
 
* Estate Owner
 
* Estate Owner
 
* Listed in estate_managers
 
* Listed in estate_managers
  
===Permissions===
+
=== Permissions ===
  
==Parcel Owner==
+
== Parcel Owner ==
===Set===
+
=== Set ===
 
Specified in land
 
Specified in land
  
===Permissions===
+
=== Permissions ===
  
==Parcels Managers==
+
== Parcels Managers ==
===Set===
+
=== Set ===
 
* Parcel Owner
 
* Parcel Owner
 
* Estate Managers
 
* Estate Managers
 
* Administrators
 
* Administrators
===Permissions===
+
=== Permissions ===
  
==Object Manager==
+
== Object Manager ==
 
Has permissions to manage content on an object level.
 
Has permissions to manage content on an object level.
  
Line 70: Line 70:
 
* Admin should be able to edit anything in the sim (including admin objects)
 
* Admin should be able to edit anything in the sim (including admin objects)
  
===Set===
+
=== Set ===
 
* if locked only Administrators
 
* if locked only Administrators
 
* if not locked,
 
* if not locked,

Revision as of 20:54, 3 March 2012


This page aims to explain the server side permissions as implemented by the default PermissionsModule.


On this page, each permission group is defined as a 'Set' - that is, who is within that set. A Set can contain other Sets.

Region Master

Due to historical reasons, The Region Master is called Master Avatar, Region Master or Region Owner interchangeably.

Set

1/Region, specified in the region xml.

Permissions

Administrator

Somebody set to administrate the content of a set of regions within an estate.

Set

  • if (Region Owner is God) Region Owner
  • if (Grid Gods Allowed) GodLevel > 200
  • Estate Owner

Permissions

Estate Owner

Set

Specified in estate_settings

Permissions

God

A 'God' has a 'god level' - this concept is under development. The 'god' concept is a way to assign users trust levels, rather than incorporating them into a policy group like 'administrators' or 'estate managers'. See also Userlevel

Set

Administrators

Permissions

Estate Manager

Set

  • Estate Owner
  • Listed in estate_managers

Permissions

Parcel Owner

Set

Specified in land

Permissions

Parcels Managers

Set

  • Parcel Owner
  • Estate Managers
  • Administrators

Permissions

Object Manager

Has permissions to manage content on an object level.

Comments taken from the code:

  • The default is to deny.
  • People shouldn't be able to do anything with locked objects, except the Administrator. The 'set permissions' runs through a different permission check, so when an object owner sets an object locked, the only thing that they can do is unlock it. Nobody but the object owner can set permissions on an object.
  • Object owners should be able to edit their own content
  • Users should be able to edit what is over their land.
  • Estate users should be able to edit anything in the sim
  • Admin objects should not be editable by estate managers or parcel owners
  • Admin should be able to edit anything in the sim (including admin objects)

Set

  • if locked only Administrators
  • if not locked,
    • Object Owner
    • if(Owner not Administrator) Parcel Owner
    • if(Owner not Administrator) Estate Manager
    • Administrator

Permissions

Personal tools
General
About This Wiki