Lower Rank Can Give Self A Higher Rank

[DendeSon]

Hello. I am running a TTT server and need help with ranking. The only groups that i am concerned with are 'S.Admin' and 'Staff'. Is there a way to allow 'S.Admin' to change peoples ranks but restrict them from being able to change their own or someones rank to 'Staff' ( Basically a higher group)?

The perm that is being focused on is the 'adduser' and 'removeuser'.

[JamminR]

See our FAQs and articles regarding can_target.
They will get you started.

[DendeSon]

I understand how can_target works and I do have it setup for S.Admin and Staff. S.Admin can_target !%staff and Staff can_target *. I still cannot limit the power of the S.Admin giving themselves Staff (the higher rank).

[JamminR]

Ok, to be perfectly honest, I've never actually had to do what your trying.
Your server may explode. I personally don't recommend mis-use of remove/add user. It's superadmin for a reason by default, even with our uber awesome restriction system.
BUT, from what I see here - /index.php/topic,4872.0.html#msg20767 />(Not a faq, but knew there were 'how to limit' discussions somewhere, you MAY be able to limit your s.admin group with something like.

Code: [Select]

ulx groupallow s.admin "ulx adduser" "* !%staff"Same for ulx removeuser.
If you have more than one higher group than staff, use commas.

Code: [Select]

ulx groupallow s.admin "ulx adduser" "* !%staff,!%<higher_group2>,!%<higher_group3>"
You'll have to figure out on your own how to prevent your s.admin from adjusting staff level members. Might be *,!%staff in that first parameter.

Now, all the above being said, we really, and I mean REALLY, don't advise giving anyone adduser/remove user access in this way even if it works.
Those commands are meant for root/superuser only. It's why Gmod created it that way.
I understand the whole convenience thing, but, really, trust should be seriously earned.

[Megiddo]

That's a neat idea JamminR! But it unfortunately won't work -- the second argument to ulx adduser is a string, we have no special type for groups. Someone could specify what groups they're allowed to add a user to explicitly though, it would look like the following:

Code: [Select]

ulx groupallow sadmin "ulx adduser" "* operator,moderator,blah"

[DendeSon]

Sorry this is a bit late but where exactly would i put this line of code into?

[Cobalt]

Sorry this is a bit late but where exactly would i put this line of code into?

It's a console command.

[DendeSon]

After typing this into console my "superadmin" rank could not change the group of anyone. I only needed them to be able to give the group "member".

 Here is what I typed into console:

Code: [Select]

ulx groupallow superadmin "ulx adduser" "* member"

[DendeSon]

You guys think you could possibly think about adding this into a future update? I could never figure out how to restrict 'superadmin' from adding themselves or others to 'staff'.

[Cobalt]

If you don't trust superadmins with managing groups they shouldn't be superadmins in the first place.

[DendeSon]

If you don't trust superadmins with managing groups they shouldn't be superadmins in the first place.

Not what I am looking for but thanks anyways. Still curious about my previous post.

You guys think you could possibly think about adding this into a future update? I could never figure out how to restrict 'superadmin' from adding themselves or others to 'staff'.

[syn.]

... Just whitelist certain the ranks you want them to be able to add people to or themselves to. Go on the set permissions on the ulx xgui and then click restrict groups then on the whitelist type in the groups you want them to be able to access or become.

Example: http://gyazo.com/07d2f8ece11483bc579f630390362893
headadmin can addusers or addids to the groups/ranks in the whitelist. But headadmin can't addusers/ids to groups/ranks that aren't in the whitelist. Might be a pain but everything comes with a price.

[LuaTenshi]

In addition to the above you would want to make it so that admins are not able to use "adduser" on them selves.

The syntax for that would be "!^" meaning "not self".


Alternatively if your like me and like to use Lua to make things that don't work, work how you want them to you can do this...

Code: Lua

1. _oldulxadduser = ulx.adduser
2. function ulx.adduser( calling_ply, target_ply, group_name )
3.      if not calling_ply:CheckGroup("owner") then -- owner being the rank that you are in, or the rank at which you want to start bypassing the restriction below.
4.           if (calling_ply:CheckGroup(group_name) and group_name != "Staff" and (calling_ply != target_ply)) then
5.                _oldulxadduser( calling_ply, target_ply, group_name )
6.           else
7.                calling_ply:ChatPrint("You are not allowed to do this!")
8.           end
9.      else
10.           _oldulxadduser( calling_ply, target_ply, group_name )
11.      end
12. end

Also please do note that at the time of writing this I am dead tired, so I might just be talking crazy.

_{PS. I sent you a friends request on Steam, so that if you would like me to take a look at your ranks for you, you can just ask.}

[DendeSon]

In addition to the above you would want to make it so that admins are not able to use "adduser" on them selves.

The syntax for that would be "!^" meaning "not self".


Alternatively if your like me and like to use Lua to make things that don't work, work how you want them to you can do this...

Code: Lua

1. _oldulxadduser = ulx.adduser
2. function ulx.adduser( calling_ply, target_ply, group_name )
3.      if not calling_ply:CheckGroup("owner") then -- owner being the rank that you are in, or the rank at which you want to start bypassing the restriction below.
4.           if (calling_ply:CheckGroup(group_name) and group_name != "Staff" and (calling_ply != target_ply)) then
5.                _oldulxadduser( calling_ply, target_ply, group_name )
6.           else
7.                calling_ply:ChatPrint("You are not allowed to do this!")
8.           end
9.      else
10.           _oldulxadduser( calling_ply, target_ply, group_name )
11.      end
12. end

Also please do note that at the time of writing this I am dead tired, so I might just be talking crazy.

_{PS. I sent you a friends request on Steam, so that if you would like me to take a look at your ranks for you, you can just ask.}

This worked perfectly. Thank you very much!