Permissions (Server)

From OpenSimulator

(Difference between revisions)
Jump to: navigation, search
m (New page: Permissions This page aims to explain the server side permissions as implemented by the default PermissionsModule. On this page, each permission group is defined as a 'Set' - that is, who...)
 
Line 1: Line 1:
Permissions
+
=OpenSim Permissions=
 
This page aims to explain the server side permissions as implemented by the default PermissionsModule.
 
This page aims to explain the server side permissions as implemented by the default PermissionsModule.
  
 
On this page, each permission group is defined as a 'Set' - that is, who is within that set. A Set can contain other Sets.
 
On this page, each permission group is defined as a 'Set' - that is, who is within that set. A Set can contain other Sets.
  
This page is under construction, so is omitting a lot of information.
+
==Region Master==
 +
Due to historical reasons, The Region Master is called Master Avatar, Region Master or Region Owner interchangeably.
  
Region Master
+
===Set===
Set:
+
Specified per region in the region xml.
Master Avatar = Region Master = Region Owner
+
===Permissions===
  
 +
==Administrator==
 +
Somebody set to administrate the content of a set of regions within an estate.
  
Administrator
+
===Set==
Set:
+
 
if (Region Owner is God) Region Owner
 
if (Region Owner is God) Region Owner
 
if (Grid Gods Allowed) GodLevel > 200
 
if (Grid Gods Allowed) GodLevel > 200
 
Estate Owner
 
Estate Owner
 +
===Permissions===
  
Permissions:
+
==Estate Owner==
 
+
===Set===
 
+
 
+
 
+
Region Owner
+
Set:
+
Specified in
+
 
+
Estate Owner
+
Set:
+
 
Specified in estate_settings
 
Specified in estate_settings
 +
===Permissions===
  
Estate Manager
+
==Estate Manager==
Set:
+
===Set===
 
Estate Owner
 
Estate Owner
 
Listed in estate_managers
 
Listed in estate_managers
 +
===Permissions===
  
Parcel Owner
+
==Parcel Owner==
Set:
+
===Set===
 
Listed in land
 
Listed in land
 +
===Permissions===
  
 
+
==Parcels Managers==
Parcels Managers
+
===Set===
Set:
+
 
Parcel Owner
 
Parcel Owner
 
Estate Managers
 
Estate Managers
 
Administrators
 
Administrators
 +
===Permissions===
  
Object Managers
+
==Object Manager==
Set:
+
Has permissions to administrate single objects
if locked only Administrators
+
if not locked,
+
Object Owner
+
if(Owner not Administrator) Parcel Owner
+
if(Owner not Administrator) Estate Manager
+
Administrator
+
 
+
 
Comments taken from the code:
 
Comments taken from the code:
 
* The default is to deny.
 
* The default is to deny.
Line 63: Line 53:
 
* Admin objects should not be editable by estate managers or parcel owners
 
* Admin objects should not be editable by estate managers or parcel owners
 
* Admin should be able to edit anything in the sim (including admin objects)
 
* Admin should be able to edit anything in the sim (including admin objects)
 +
 +
===Set===
 +
if locked only Administrators
 +
if not locked,
 +
Object Owner
 +
if(Owner not Administrator) Parcel Owner
 +
if(Owner not Administrator) Estate Manager
 +
Administrator
 +
===Permissions===

Revision as of 01:44, 27 November 2008

Contents

OpenSim Permissions

This page aims to explain the server side permissions as implemented by the default PermissionsModule.

On this page, each permission group is defined as a 'Set' - that is, who is within that set. A Set can contain other Sets.

Region Master

Due to historical reasons, The Region Master is called Master Avatar, Region Master or Region Owner interchangeably.

Set

Specified per region in the region xml.

Permissions

Administrator

Somebody set to administrate the content of a set of regions within an estate.

=Set

if (Region Owner is God) Region Owner if (Grid Gods Allowed) GodLevel > 200 Estate Owner

Permissions

Estate Owner

Set

Specified in estate_settings

Permissions

Estate Manager

Set

Estate Owner Listed in estate_managers

Permissions

Parcel Owner

Set

Listed in land

Permissions

Parcels Managers

Set

Parcel Owner Estate Managers Administrators

Permissions

Object Manager

Has permissions to administrate single objects Comments taken from the code:

  • The default is to deny.
  • People shouldn't be able to do anything with locked objects, except the Administrator. The 'set permissions' runs through a different permission check, so when an object owner sets an object locked, the only thing that they can do is unlock it. Nobody but the object owner can set permissions on an object.
  • Object owners should be able to edit their own content
  • Users should be able to edit what is over their land.
  • Estate users should be able to edit anything in the sim
  • Admin objects should not be editable by estate managers or parcel owners
  • Admin should be able to edit anything in the sim (including admin objects)

Set

if locked only Administrators if not locked, Object Owner if(Owner not Administrator) Parcel Owner if(Owner not Administrator) Estate Manager Administrator

Permissions

Personal tools
General
About This Wiki