Multi Theft Auto: Wiki - User contributions [en]

IT/ACL

2013-01-11T19:54:23Z

Scienziatogm:

MTA contiene una lista di controllo degli accessi che permette di dare dei determinati privilegi e mantenere la sicurezza.

The key concept of MTA's ACL (and ACLs in general) is that you're giving a specific object a set of rights. In MTA's case objects are one of two things - resources or users. There are numerous ''rights'' available in MTA - these mainly focus on server-side scripting functions.

What this essentially means is that the ACL allows you to choose exactly what functions a resource or user can perform. This can obviously be invaluable - for example preventing all your server's players from being able to ban each other, or preventing your new untested resources from doing the same.

Of course, ''with great power comes great responsibility'' and it is very easily possible to completely break resources - for example, disabling [[spawnPlayer]] for all resources would be a Bad Thing. Of course, there are situations when you might want to do this - if you want to force all your resources to use a spawn manager resource for example, but even this is somewhat draconian.

==Understanding the ACL==
There are two major components to the ACL: groups and ACL lists. They appear as '''<group name="">''' nodes and '''<acl name="" />''' nodes. Their purpose is to:<br \>
'''1.''' Grant users permission to control the server and use resource commands. Examples:''<br \>
*Allowing only admins to use the giveweapon function of freeroam
*Allowing all users to start a resource
'''2.''' Grant resources permission to use script functions and functions of other resources. Examples:<br \>
*Allowing a resource to use the restartResource function
*Allowing a resource to use the call function to use exported functions from another script

===Default Groups===
MTA has provided some default groups with increasing permissions. These groups are:
*'''Everyone'''
*'''Moderator'''
*'''SuperModerator'''
*'''Admin'''
*'''Console''' - This controls permissions of people who are using the console through '''<object name="user.Console" />'''
*'''RPC''' - Remote Procedure Call. Specifically grants access to [[callRemote]] only and disables commands of default resources. Check the function for details.
<br \>

To explain further, I will use the Everyone group as an example. By default it looks like this:
<syntaxhighlight lang="lua"> <group name="Everyone">
<acl name="Default" />
<object name="user.*" />
<object name="resource.*" />
</group>
</syntaxhighlight>
<br \>
You will first notice the acl name inside the group. It defines what permissions the group has. Users and resources in this group will have the permissions specified on the "Default" acl name list. ''Note: You will notice this group is special, in that it includes every user and resource by using a '''wildcard (*)''' where the user or resource name would be.''

Now, scroll further down the ACL and you will see the '''<acl name="Default" />''' listing. Note I have trimmed this list dramatically due to its length.

<syntaxhighlight lang="lua"> <acl name="Default">
<right name="command.start" access="false" />
<right name="command.stop" access="false" />
<right name="command.stopall" access="false" />
...etc etc...
<right name="function.executeCommandHandler" access="false" />
<right name="function.setPlayerMuted" access="false" />
<right name="function.restartResource" access="false" />
...etc etc...
<right name="general.adminpanel" access="false" />
<right name="general.tab_players" access="false" />
<right name="general.tab_resources" access="false" />
...etc etc...
<right name="command.freeze" access="false" />
<right name="command.shout" access="false" />
<right name="command.spectate" access="false" />
...etc etc...
</acl>
</syntaxhighlight>
<br \>
*'''Function''' entries are MTA scripting functions. For example, if a resource needed to use restartResource and was only in the 'Everyone' group (with the 'Default' list), it would be denied access to restartResource and fail to work correctly.
*'''Commands''' are created when a resource uses [[addCommandHandler]]. An example would be typing '''/createvehicle [vehicle]''' in the chatbox for the freeroam resource. This controls whether users in the group using this ACL can use the command. ''Note: commands have no effect on resources within the group. Commands are only related to users.''
**''General is a custom right name group created by the admin resource but it works on the same principles. The script works with them by using [[hasObjectPermissionTo]]''

You will notice some groups such as admin have multiple '''<acl name="" />''' nodes. An example is the admin group:
<syntaxhighlight lang="lua">
<group name="Admin">
<acl name="Moderator" />
<acl name="SuperModerator" />
<acl name="Admin" />
<acl name="RPC" />
<object name="resource.admin" />
<object name="resource.webadmin" />
<object name="user.Ransom" />
</group>
</syntaxhighlight>

This gives all the permissions defined in each '''<acl name="" />''' node in order of listing. So for example, the admin group makes sure all the permissions are given to admins by using all the lists. If there are any conflicts, the lowest entry wins. For example, pretend these 2 acls were in a group in the following order:

'''1.''' '''<acl name="Default">''' sets <right name="general.ModifyOtherObjects" access="false" /> <br\>
'''2.''' '''<acl name="Admin">''' sets <right name="general.ModifyOtherObjects" access="true" /> <br\>
'''3.''' For all users and resources in group admin: <right name="general.ModifyOtherObjects" access="true" /><br\>
<br\>

=== Resource Groups and ACLs ===
You will notice there are some other groups that came with MTA. These were defined by resources that came with MTA. If a resource wants to designate specific ACL rights not provided by the default MTA groups, it can create its own ACL name and a group to use it. I will show AMX's entry as an example. AMX is designed to emulate SA-MP scripts and it needs a certain set of permissions that doesn't fit the default groups well. It is shown below:

<syntaxhighlight lang="lua">
<group name="AMX">
<acl name="AMX" />
<object name="resource.amx" />
</group>

<acl name="AMX">
<right name="general.ModifyOtherObjects" access="true" />
<right name="function.startResource" access="true" />
<right name="function.stopResource" access="true" />
<right name="general.adminpanel" access="false" />
...etc etc...
<right name="command.kick" access="false" />
<right name="command.freeze" access="false" />
<right name="command.mute" access="false" />
...etc etc...
</acl>
</syntaxhighlight>

==Modifying the ACL==
There are three ways you can modify the ACL - how you do it depends who you are.

===HTTP Interface===
You can use the [[Resource/webadmin|webadmin]] http interface to modify the ACL in your web browser. This is by far the easiest way to do so. Just make sure the ''webadmin'' resource is started on your server and visit ''<nowiki>http://ServerIP:HttpPort/</nowiki>''. You can then use the two sections - ACLs and Groups. ACLs allows you to create your Access Control Lists - lists of rights. Groups allow you to group together collections of users and assign ACLs to them. For example, the ACLs section allows you to specify that the Admin ACL has access to the ''start'' console command. You can the go to the Groups section and create an Admin ''group'' that has access to your Admin ''acl''. You can then add users to your Admin ''group''.

===XML file===
You can modify the ACL.xml file manually. This has a fairly straightforward syntax, but it can get a bit confusing at times. If you do it while the server is running, don't forget to call the scripting function [[aclReload]] ("start runcode", "run aclReload()") so the new ACL is loaded, or otherwise stop your server before modifying. This also prevents your changes from being accidentally overwritten by the server.

===Scripting functions===
You can use a large number of ACL scripting functions to modify the ACL on the fly. Of course, you can (and really should!) limit access to the ACL functions with the ACL. Note that the '''admin resource''' that comes with MTA can be used to manage the ACL from the resources tab. You must be setup as admin to use the admin panel. [http://wiki.multitheftauto.com/wiki/Admin Click here for admin setup instructions].

==See Also==
{{ACL functions}}
[[Category:Scripting Concepts]]
[[ru:Access Control List]]

IT/Pagina principale

2013-01-11T19:53:17Z

Scienziatogm:

[[Category:IT/Pagine italiane]]
__NOTOC__
__NOEDITSECTION__
{| width="100%" cellspacing="0" cellpadding="0"
| colspan="2" |
<div style="border: 1px solid #D8D8D8; padding: 5px; height: 150px;">
[[File:Mtalogo.png|left|100px]]'''Benvenuto nella wiki ufficiale italiana di Multi Theft Auto.''' Su questa wiki troverai molte informazioni sullo sviluppo di gamemode e mappe per Multi Theft Auto.
[[How you can help|Puoi aiutarci]] a migliorare MTA con la tua esperienza - creare una mappa, una gamemode, aiutarci a documentare le funzioni, scrivere esempi di codice, delle guide o semplicemente giocare su MTA e segnalare i bugs che vi troverai.

Se hai una qualunque domanda o un problema in relazione con lo scripting, sei libero di chiedercelo, noi ti aiuteremo nel migliore dei modi sul nostro [[IRC Channel|canale IRC]] (in lingua Inglese).

'''Attenzione:''' La wiki Italiana è in fase di traduzione. Le pagine non ancora tradotte sono state temporaneamente sostituite con le pagine originali (in Inglese).
<p align="right">''Stop playing with yourself'' (Tradotto: ''Basta giocare da solo'')</p>
</div>
|}
{| width="100%" cellspacing="0" cellpadding="0"
| colspan="2" |
|-
|width="50%" style="vertical-align:top;" |<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Input-gaming.png‎]]</div>
=== Per giocare... ===
<div style="background: #FFEEAA;">
[[File:Go-down.png|link=http://mtasa.com/]] ''' [http://mtasa.com/ Scarica Multi Theft Auto: San Andreas {{Current Version|full}}]'''</div>
* [[IT/Manuale_del_Client|Manuale del Client]]
* [[Changes_in_1.1| Cambiamenti nella 1.1]]
* [[IT/Bugs_noti_e_FAQ|Problemi noti e F.A.Q.]]
* [[Upgrading_from_MTA:Race|Migrare da MTA:Race a MTA:SA 1.0.x]]
* [[IT/Manuale_del_Server|Manuale del Server]]
* [[Resource:IT/Map_manager|Gestore delle Mappe]]

=== Editor delle Mappe ===
*[[Resource:Editor|Manuale]]
*[[Resource:Editor/EDF|Estensioni EDF]]
*[[Resource:Editor/Plugins|Plugins]]
*[[Resource:Editor#FAQ|F.A.Q.]]
</div>
<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Package-x-generic.png‎]]</div>
====Contenitori====
Questa sezione descrive le funzionalità del Lua, di MTA e delle sue risorse.
* [[:Category:IT/Risorse|Catalogo Risorse]] - Devi leggere questo per iniziare a scriptare.
* [[IT/Script_client-side|Scripts Client-Side]]
* [[Modules|Moduli]]
</div>

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Applications-development.png‎‎‎]]</div>
====Sviluppare Multi Theft Auto====
[[File:Go-down.png|link=http://nightly.mtasa.com/]] [http://nightly.mtasa.com/ Versioni in sviluppo]
* [[Compiling_MTASA|Compilare MTASA su Windows]]
* [[Building_MTASA_Server_on_Mac_OS_X|Compilare MTASA su Mac OS X]]
* [[Building_MTASA_Server_on_GNU_Linux|Compilare MTASA su GNU/Linux]]
* [[Coding guidelines|Guida per programmare]]
* [http://code.google.com/p/mtasa-blue Codice Sorgente su Google Code]
* [[Roadmap|Pagina di sviluppo]]
* [http://bugs.mtasa.com/ Segnalare bugs]
</div>
<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Applications-office.png‎]]</div>
=== Wiki - Come puoi aiutarci ===
* Finire la documentazione per le [[:Category:IT/Pagine_italiane|funzioni incomplete]].
* [[:Category:Needs_Example |Aggiungi gli esempi per le funzioni e per gli eventi]].
* Controlla e verifica [[:Category:Needs Checking|le pagine che hanno bisogno di correzioni]].
* Scrivere guide per aiutare i principianti.
* Tradurre la wiki in altre lingue.
</div>

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Internet-group-chat.png‎]]</div>
=== Comunità ===
* [http://forum.multitheftauto.com/ Forum]
* Canale IRC: [irc://irc.multitheftauto.com/mta irc.multitheftauto.com #mta]
* [http://community.mtasa.com/ MTA Community] - Condividi e scarica le risorse.
* [http://www.youtube.com/user/MTAQA Canale Youtube]
</div>

| width="50%" style="vertical-align:top;" |

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Accessories-text-editor.png]]</div>
=== Scripting ===
* [[IT/Introduzione_allo_scripting|Introduzione allo Scripting]]
* [[IT/Introduzione_allo_scripting_della_GUI| Introduzione allo Scripting della GUI]]
* [[IT/Guida_al_Debug|Guida al Debug]] - Come trovare gli errori nei tuoi scripts.
* [[IT/Introduzione_alle_Risorse|Introduzione alle Risorse]]
** [[Resource Web Access|Accesso Web per le Risorse]] - Come fare siti web con le risorse.
** [[:Category:IT/Risorse|Catalogo delle Risorse]]
** [[IT/Meta.xml|Meta.xml]] - Dietro ogni risorsa c'è sempre un file meta da definire
** [[IT/ACL|ACL]] - Lista Controllo dei Privilegi, questa guida è vitale per usare gli scripts più complessi
* [[IT/Scrivere_una_gamemode|Scrivere una Modalità di Gioco]]
* [[Useful_Functions|Funzioni più utilizzate]]
<div style="float:right; width: 32px;">[[File:start-here.png]]</div>
====Aiuto Generale per il Lua====
Queste pagine ti aiuteranno a comprendere meglio il Lua
*[http://www.lua.org/pil/index.html Manuale "Programmare in Lua"]
**[http://www.lua.org/manual/5.1/#index Funzioni e riferimenti interni del Lua]
*[http://lua-users.org/wiki/TutorialDirectory Documentazione del Lua]
*[http://nixstaller.berlios.de/manual/0.2/nixstaller_9.html Una guida generale del Lua fatta da Nixstaller]
</div>

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px; background:#CCCCFF;">
====Riferimenti====
* [[IT/Funzioni_Client-side|Funzioni Client-Side]]
* [[Client Scripting Events|Eventi Client-Side]]
* [[Server Scripting Functions|Funzioni Server-Side]]
* [[Server Scripting Events|Eventi Server-Side]]

* [[MTA Classes|Classi MTA]] - Descrizione di tutti gli elementi personalizzati di MTA
** [[Element|Elementi di MTA]] / [[Element tree|Albero degli Elementi]]
</div>
<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:System-file-manager.png]]</div>
====[[Id|Liste degli ID]]====
*[[Animations|Animazioni]]
*[[IT/Skin_Personaggi|Skin dei Personaggi]]
*[[IT/Vestiti_di_CJ|Abbigliamento]]
*[[Garage|ID dei Garage]]
*[[Interior IDs|ID degli Interni]]
*[[Material IDs|ID dei Materiali]]
*[[Template:IT/Proiettili|Proiettili]]
*[[Template:IT/Segnalini_radar|Indicatori del Mini-Radar]]
*[[Template:IT/Suoni|Suoni]]
*[[IT/ID_Veicoli|ID dei Veicoli]]
*[[IT/Colori_default_veicoli|Colori dei Veicoli]]
*[[IT/Modifiche_Veicoli|Mod dei Veicoli]]
*[[Vehicle variants|Varianti dei Veicoli]]
*[[IT/Armi|Armi]]
*[[IT/Meteo|Tempo Meteorologico]]
</div>
<div style="padding:4px 8px 8px 8px; margin:10px;">
[[File:Osi symbol.png|75px|link=http://opensource.org/]]
'''Multi Theft Auto''' è '''Open Source'''.
<br />Questo significa che puoi collaborare e dare il tuo contributo per migliorare Multi Theft Auto!
</div>

|-
| colspan="2" |
|}
{{Languages list|it}}

IT/Pagina principale

2013-01-11T19:53:00Z

Scienziatogm:

[[Category:IT/Pagine italiane]]
__NOTOC__
__NOEDITSECTION__
{| width="100%" cellspacing="0" cellpadding="0"
| colspan="2" |
<div style="border: 1px solid #D8D8D8; padding: 5px; height: 150px;">
[[File:Mtalogo.png|left|100px]]'''Benvenuto nella wiki ufficiale italiana di Multi Theft Auto.''' Su questa wiki troverai molte informazioni sullo sviluppo di gamemode e mappe per Multi Theft Auto.
[[How you can help|Puoi aiutarci]] a migliorare MTA con la tua esperienza - creare una mappa, una gamemode, aiutarci a documentare le funzioni, scrivere esempi di codice, delle guide o semplicemente giocare su MTA e segnalare i bugs che vi troverai.

Se hai una qualunque domanda o un problema in relazione con lo scripting, sei libero di chiedercelo, noi ti aiuteremo nel migliore dei modi sul nostro [[IRC Channel|canale IRC]] (in lingua Inglese).

'''Attenzione:''' La wiki Italiana è in fase di traduzione. Le pagine non ancora tradotte sono state temporaneamente sostituite con le pagine originali (in Inglese).
<p align="right">''Stop playing with yourself'' (Tradotto: ''Basta giocare da solo'')</p>
</div>
|}
{| width="100%" cellspacing="0" cellpadding="0"
| colspan="2" |
|-
|width="50%" style="vertical-align:top;" |<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Input-gaming.png‎]]</div>
=== Per giocare... ===
<div style="background: #FFEEAA;">
[[File:Go-down.png|link=http://mtasa.com/]] ''' [http://mtasa.com/ Scarica Multi Theft Auto: San Andreas {{Current Version|full}}]'''</div>
* [[IT/Manuale_del_Client|Manuale del Client]]
* [[Changes_in_1.1| Cambiamenti nella 1.1]]
* [[IT/Bugs_noti_e_FAQ|Problemi noti e F.A.Q.]]
* [[Upgrading_from_MTA:Race|Migrare da MTA:Race a MTA:SA 1.0.x]]
* [[IT/Manuale_del_Server|Manuale del Server]]
* [[Resource:IT/Map_manager|Gestore delle Mappe]]

=== Editor delle Mappe ===
*[[Resource:Editor|Manuale]]
*[[Resource:Editor/EDF|Estensioni EDF]]
*[[Resource:Editor/Plugins|Plugins]]
*[[Resource:Editor#FAQ|F.A.Q.]]
</div>
<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Package-x-generic.png‎]]</div>
====Contenitori====
Questa sezione descrive le funzionalità del Lua, di MTA e delle sue risorse.
* [[:Category:IT/Risorse|Catalogo Risorse]] - Devi leggere questo per iniziare a scriptare.
* [[IT/Script_client-side|Scripts Client-Side]]
* [[Modules|Moduli]]
</div>

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Applications-development.png‎‎‎]]</div>
====Sviluppare Multi Theft Auto====
[[File:Go-down.png|link=http://nightly.mtasa.com/]] [http://nightly.mtasa.com/ Versioni in sviluppo]
* [[Compiling_MTASA|Compilare MTASA su Windows]]
* [[Building_MTASA_Server_on_Mac_OS_X|Compilare MTASA su Mac OS X]]
* [[Building_MTASA_Server_on_GNU_Linux|Compilare MTASA su GNU/Linux]]
* [[Coding guidelines|Guida per programmare]]
* [http://code.google.com/p/mtasa-blue Codice Sorgente su Google Code]
* [[Roadmap|Pagina di sviluppo]]
* [http://bugs.mtasa.com/ Segnalare bugs]
</div>
<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Applications-office.png‎]]</div>
=== Wiki - Come puoi aiutarci ===
* Finire la documentazione per le [[:Category:IT/Pagine_italiane|funzioni incomplete]].
* [[:Category:Needs_Example |Aggiungi gli esempi per le funzioni e per gli eventi]].
* Controlla e verifica [[:Category:Needs Checking|le pagine che hanno bisogno di correzioni]].
* Scrivere guide per aiutare i principianti.
* Tradurre la wiki in altre lingue.
</div>

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Internet-group-chat.png‎]]</div>
=== Comunità ===
* [http://forum.multitheftauto.com/ Forum]
* Canale IRC: [irc://irc.multitheftauto.com/mta irc.multitheftauto.com #mta]
* [http://community.mtasa.com/ MTA Community] - Condividi e scarica le risorse.
* [http://www.youtube.com/user/MTAQA Canale Youtube]
</div>

| width="50%" style="vertical-align:top;" |

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:Accessories-text-editor.png]]</div>
=== Scripting ===
* [[IT/Introduzione_allo_scripting|Introduzione allo Scripting]]
* [[IT/Introduzione_allo_scripting_della_GUI| Introduzione allo Scripting della GUI]]
* [[IT/Guida_al_Debug|Guida al Debug]] - Come trovare gli errori nei tuoi scripts.
* [[IT/Introduzione_alle_Risorse|Introduzione alle Risorse]]
** [[Resource Web Access|Accesso Web per le Risorse]] - Come fare siti web con le risorse.
** [[:Category:IT/Risorse|Catalogo delle Risorse]]
** [[IT/Meta.xml|Meta.xml]] - Dietro ogni risorsa c'è sempre un file meta da definire
** [[IT/ACL]] - Lista Controllo dei Privilegi, questa guida è vitale per usare gli scripts più complessi
* [[IT/Scrivere_una_gamemode|Scrivere una Modalità di Gioco]]
* [[Useful_Functions|Funzioni più utilizzate]]
<div style="float:right; width: 32px;">[[File:start-here.png]]</div>
====Aiuto Generale per il Lua====
Queste pagine ti aiuteranno a comprendere meglio il Lua
*[http://www.lua.org/pil/index.html Manuale "Programmare in Lua"]
**[http://www.lua.org/manual/5.1/#index Funzioni e riferimenti interni del Lua]
*[http://lua-users.org/wiki/TutorialDirectory Documentazione del Lua]
*[http://nixstaller.berlios.de/manual/0.2/nixstaller_9.html Una guida generale del Lua fatta da Nixstaller]
</div>

<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px; background:#CCCCFF;">
====Riferimenti====
* [[IT/Funzioni_Client-side|Funzioni Client-Side]]
* [[Client Scripting Events|Eventi Client-Side]]
* [[Server Scripting Functions|Funzioni Server-Side]]
* [[Server Scripting Events|Eventi Server-Side]]

* [[MTA Classes|Classi MTA]] - Descrizione di tutti gli elementi personalizzati di MTA
** [[Element|Elementi di MTA]] / [[Element tree|Albero degli Elementi]]
</div>
<div style="border: 1px solid #D8D8D8; padding:4px 8px 8px 8px; margin:10px;">
<div style="float:right; width: 32px;">[[File:System-file-manager.png]]</div>
====[[Id|Liste degli ID]]====
*[[Animations|Animazioni]]
*[[IT/Skin_Personaggi|Skin dei Personaggi]]
*[[IT/Vestiti_di_CJ|Abbigliamento]]
*[[Garage|ID dei Garage]]
*[[Interior IDs|ID degli Interni]]
*[[Material IDs|ID dei Materiali]]
*[[Template:IT/Proiettili|Proiettili]]
*[[Template:IT/Segnalini_radar|Indicatori del Mini-Radar]]
*[[Template:IT/Suoni|Suoni]]
*[[IT/ID_Veicoli|ID dei Veicoli]]
*[[IT/Colori_default_veicoli|Colori dei Veicoli]]
*[[IT/Modifiche_Veicoli|Mod dei Veicoli]]
*[[Vehicle variants|Varianti dei Veicoli]]
*[[IT/Armi|Armi]]
*[[IT/Meteo|Tempo Meteorologico]]
</div>
<div style="padding:4px 8px 8px 8px; margin:10px;">
[[File:Osi symbol.png|75px|link=http://opensource.org/]]
'''Multi Theft Auto''' è '''Open Source'''.
<br />Questo significa che puoi collaborare e dare il tuo contributo per migliorare Multi Theft Auto!
</div>

|-
| colspan="2" |
|}
{{Languages list|it}}

IT/ACL

2013-01-11T19:52:23Z

Scienziatogm: Created page with "MTA includes a complete Access Control List (ACL) that allows you to secure and limit access to the server, its functions and resources in any number of ways. The key concept of..."

MTA includes a complete Access Control List (ACL) that allows you to secure and limit access to the server, its functions and resources in any number of ways.

The key concept of MTA's ACL (and ACLs in general) is that you're giving a specific object a set of rights. In MTA's case objects are one of two things - resources or users. There are numerous ''rights'' available in MTA - these mainly focus on server-side scripting functions.

What this essentially means is that the ACL allows you to choose exactly what functions a resource or user can perform. This can obviously be invaluable - for example preventing all your server's players from being able to ban each other, or preventing your new untested resources from doing the same.

Of course, ''with great power comes great responsibility'' and it is very easily possible to completely break resources - for example, disabling [[spawnPlayer]] for all resources would be a Bad Thing. Of course, there are situations when you might want to do this - if you want to force all your resources to use a spawn manager resource for example, but even this is somewhat draconian.

==Understanding the ACL==
There are two major components to the ACL: groups and ACL lists. They appear as '''<group name="">''' nodes and '''<acl name="" />''' nodes. Their purpose is to:<br \>
'''1.''' Grant users permission to control the server and use resource commands. Examples:''<br \>
*Allowing only admins to use the giveweapon function of freeroam
*Allowing all users to start a resource
'''2.''' Grant resources permission to use script functions and functions of other resources. Examples:<br \>
*Allowing a resource to use the restartResource function
*Allowing a resource to use the call function to use exported functions from another script

===Default Groups===
MTA has provided some default groups with increasing permissions. These groups are:
*'''Everyone'''
*'''Moderator'''
*'''SuperModerator'''
*'''Admin'''
*'''Console''' - This controls permissions of people who are using the console through '''<object name="user.Console" />'''
*'''RPC''' - Remote Procedure Call. Specifically grants access to [[callRemote]] only and disables commands of default resources. Check the function for details.
<br \>

To explain further, I will use the Everyone group as an example. By default it looks like this:
<syntaxhighlight lang="lua"> <group name="Everyone">
<acl name="Default" />
<object name="user.*" />
<object name="resource.*" />
</group>
</syntaxhighlight>
<br \>
You will first notice the acl name inside the group. It defines what permissions the group has. Users and resources in this group will have the permissions specified on the "Default" acl name list. ''Note: You will notice this group is special, in that it includes every user and resource by using a '''wildcard (*)''' where the user or resource name would be.''

Now, scroll further down the ACL and you will see the '''<acl name="Default" />''' listing. Note I have trimmed this list dramatically due to its length.

<syntaxhighlight lang="lua"> <acl name="Default">
<right name="command.start" access="false" />
<right name="command.stop" access="false" />
<right name="command.stopall" access="false" />
...etc etc...
<right name="function.executeCommandHandler" access="false" />
<right name="function.setPlayerMuted" access="false" />
<right name="function.restartResource" access="false" />
...etc etc...
<right name="general.adminpanel" access="false" />
<right name="general.tab_players" access="false" />
<right name="general.tab_resources" access="false" />
...etc etc...
<right name="command.freeze" access="false" />
<right name="command.shout" access="false" />
<right name="command.spectate" access="false" />
...etc etc...
</acl>
</syntaxhighlight>
<br \>
*'''Function''' entries are MTA scripting functions. For example, if a resource needed to use restartResource and was only in the 'Everyone' group (with the 'Default' list), it would be denied access to restartResource and fail to work correctly.
*'''Commands''' are created when a resource uses [[addCommandHandler]]. An example would be typing '''/createvehicle [vehicle]''' in the chatbox for the freeroam resource. This controls whether users in the group using this ACL can use the command. ''Note: commands have no effect on resources within the group. Commands are only related to users.''
**''General is a custom right name group created by the admin resource but it works on the same principles. The script works with them by using [[hasObjectPermissionTo]]''

You will notice some groups such as admin have multiple '''<acl name="" />''' nodes. An example is the admin group:
<syntaxhighlight lang="lua">
<group name="Admin">
<acl name="Moderator" />
<acl name="SuperModerator" />
<acl name="Admin" />
<acl name="RPC" />
<object name="resource.admin" />
<object name="resource.webadmin" />
<object name="user.Ransom" />
</group>
</syntaxhighlight>

This gives all the permissions defined in each '''<acl name="" />''' node in order of listing. So for example, the admin group makes sure all the permissions are given to admins by using all the lists. If there are any conflicts, the lowest entry wins. For example, pretend these 2 acls were in a group in the following order:

'''1.''' '''<acl name="Default">''' sets <right name="general.ModifyOtherObjects" access="false" /> <br\>
'''2.''' '''<acl name="Admin">''' sets <right name="general.ModifyOtherObjects" access="true" /> <br\>
'''3.''' For all users and resources in group admin: <right name="general.ModifyOtherObjects" access="true" /><br\>
<br\>

=== Resource Groups and ACLs ===
You will notice there are some other groups that came with MTA. These were defined by resources that came with MTA. If a resource wants to designate specific ACL rights not provided by the default MTA groups, it can create its own ACL name and a group to use it. I will show AMX's entry as an example. AMX is designed to emulate SA-MP scripts and it needs a certain set of permissions that doesn't fit the default groups well. It is shown below:

<syntaxhighlight lang="lua">
<group name="AMX">
<acl name="AMX" />
<object name="resource.amx" />
</group>

<acl name="AMX">
<right name="general.ModifyOtherObjects" access="true" />
<right name="function.startResource" access="true" />
<right name="function.stopResource" access="true" />
<right name="general.adminpanel" access="false" />
...etc etc...
<right name="command.kick" access="false" />
<right name="command.freeze" access="false" />
<right name="command.mute" access="false" />
...etc etc...
</acl>
</syntaxhighlight>

==Modifying the ACL==
There are three ways you can modify the ACL - how you do it depends who you are.

===HTTP Interface===
You can use the [[Resource/webadmin|webadmin]] http interface to modify the ACL in your web browser. This is by far the easiest way to do so. Just make sure the ''webadmin'' resource is started on your server and visit ''<nowiki>http://ServerIP:HttpPort/</nowiki>''. You can then use the two sections - ACLs and Groups. ACLs allows you to create your Access Control Lists - lists of rights. Groups allow you to group together collections of users and assign ACLs to them. For example, the ACLs section allows you to specify that the Admin ACL has access to the ''start'' console command. You can the go to the Groups section and create an Admin ''group'' that has access to your Admin ''acl''. You can then add users to your Admin ''group''.

===XML file===
You can modify the ACL.xml file manually. This has a fairly straightforward syntax, but it can get a bit confusing at times. If you do it while the server is running, don't forget to call the scripting function [[aclReload]] ("start runcode", "run aclReload()") so the new ACL is loaded, or otherwise stop your server before modifying. This also prevents your changes from being accidentally overwritten by the server.

===Scripting functions===
You can use a large number of ACL scripting functions to modify the ACL on the fly. Of course, you can (and really should!) limit access to the ACL functions with the ACL. Note that the '''admin resource''' that comes with MTA can be used to manage the ACL from the resources tab. You must be setup as admin to use the admin panel. [http://wiki.multitheftauto.com/wiki/Admin Click here for admin setup instructions].

==See Also==
{{ACL functions}}
[[Category:Scripting Concepts]]
[[ru:Access Control List]]