Access Control List - Revision history

Tracer at 20:29, 6 December 2020

2020-12-06T20:29:29Z

← Older revision		Revision as of 20:29, 6 December 2020
Line 27:		Line 27:

	To explain further, I will use the Everyone group as an example. By default it looks like this:		To explain further, I will use the Everyone group as an example. By default it looks like this:
	<syntaxhighlight lang="~~xml~~"> <group name="Everyone">		<syntaxhighlight lang="XML">
			<group name="Everyone">
	<acl name="Default" />		<acl name="Default" />
	<object name="user.*" />		<object name="user.*" />
Line 38:		Line 39:
	Now, scroll further down the ACL and you will see the '''<acl name="Default" />''' listing. Note I have trimmed this list dramatically due to its length.		Now, scroll further down the ACL and you will see the '''<acl name="Default" />''' listing. Note I have trimmed this list dramatically due to its length.

	<syntaxhighlight lang="~~xml~~"> <acl name="Default">		<syntaxhighlight lang="XML">
			<acl name="Default">
	<right name="command.start" access="false" />		<right name="command.start" access="false" />
	<right name="command.stop" access="false" />		<right name="command.stop" access="false" />

Haxardous at 19:50, 19 April 2020

2020-04-19T19:50:15Z

← Older revision		Revision as of 19:50, 19 April 2020
Line 134:		Line 134:

	===Scripting functions===		===Scripting functions===
	You can use a large number of ACL scripting functions to modify the ACL on the fly. Of course, you can (and really should!) limit access to the ACL functions with the ACL. Note that the '''admin resource''' that comes with MTA can be used to manage the ACL from the resources tab. You must be ~~setup~~ as admin to use the admin panel. [http://wiki.multitheftauto.com/wiki/Admin Click here for admin setup instructions].		You can use a large number of ACL scripting functions to modify the ACL on the fly. Of course, you can (and really should!) limit access to the ACL functions with the ACL. Note that the '''admin resource''' that comes with MTA can be used to manage the ACL from the resources tab. You must be set up as admin to use the admin panel. [http://wiki.multitheftauto.com/wiki/Admin Click here for admin setup instructions].

	==See Also==		==See Also==

Haxardous at 19:48, 19 April 2020

2020-04-19T19:48:33Z

← Older revision		Revision as of 19:48, 19 April 2020
Line 1:		Line 1:
	MTA includes a complete Access Control List (ACL) that allows you to secure and limit access to the server, its functions and resources in any number of ways.		MTA includes a complete Access Control List (ACL) that allows you to secure and limit access to the server, its functions, and resources in any number of ways.

	The key concept of MTA's ACL (and ACLs in general) is that you're giving a specific object a set of rights. In MTA's case objects ~~are~~ one of two things - resources or users. There are numerous ''rights'' available in MTA - these mainly focus on server-side scripting functions.		The key concept of MTA's ACL (and ACLs in general) is that you're giving a specific object a set of rights. In MTA's case objects is one of two things - resources or users. There are numerous ''rights'' available in MTA - these mainly focus on server-side scripting functions.

	What this essentially means is that the ACL allows you to choose exactly what functions a resource or user can perform. This can obviously be invaluable - for example preventing all your server's players from being able to ban each other, or preventing your new untested resources from doing the same.		What this essentially means is that the ACL allows you to choose exactly what functions a resource or user can perform. This can obviously be invaluable - for example preventing all your server's players from being able to ban each other, or preventing your new untested resources from doing the same.
Line 84:		Line 84:

	=== Resource Groups and ACLs ===		=== Resource Groups and ACLs ===
	You will notice there are some other groups that came with MTA. These were defined by resources that came with MTA. If a resource wants to designate specific ACL rights not provided by the default MTA groups, it can create its own ACL name and a group to use it. I will show AMX's entry as an example. AMX is designed to emulate SA-MP scripts and it needs a certain set of permissions that ~~doesn~~'t fit the default groups well. It is shown below:		You will notice there are some other groups that came with MTA. These were defined by resources that came with MTA. If a resource wants to designate specific ACL rights not provided by the default MTA groups, it can create its own ACL name and a group to use it. I will show AMX's entry as an example. AMX is designed to emulate SA-MP scripts and it needs a certain set of permissions that don't fit the default groups well. It is shown below:

	<syntaxhighlight lang="xml">		<syntaxhighlight lang="xml">
Line 106:		Line 106:

	=== Grant resources access to other resources ===		=== Grant resources access to other resources ===
	To allow a resource access to any other resource, you have to allow it explicitly in your ACL file. The rule <code>general.ModifyOtherObjects</code> grants full access to any resource on the server.		To allow resource access to any other resource, you have to allow it explicitly in your ACL file. The rule <code>general.ModifyOtherObjects</code> grants full access to any resource on the server.
	See the example in the last section what it should look like.		See the example in the last section of what it should look like.

	{{New feature/item\|3.0156\|1.5.5\|14166\|		{{New feature/item\|3.0156\|1.5.5\|14166\|
Line 125:		Line 125:

	==Modifying the ACL==		==Modifying the ACL==
	There are three ways you can modify the ACL - how you do it depends who you are.		There are three ways you can modify the ACL - how you do it depends on who you are.

	===HTTP Interface===		===HTTP Interface===
	You can use the [[Resource/webadmin\|webadmin]] ~~http~~ interface to modify the ACL in your web browser. This is by far the easiest way to do so. Just make sure the ''webadmin'' resource is started on your server and visit ''<nowiki>http://ServerIP:HttpPort/</nowiki>''. You can then use the two sections - ACLs and Groups. ACLs ~~allows~~ you to create your Access Control Lists - lists of rights. Groups allow you to group together collections of users and assign ACLs to them. For example, the ACLs section allows you to specify that the Admin ACL has access to the ''start'' console command. You can ~~the~~ go to the Groups section and create an Admin ''group'' that has access to your Admin ''acl''. You can then add users to your Admin ''group''.		You can use the [[Resource/webadmin\|webadmin]] HTTP interface to modify the ACL in your web browser. This is by far the easiest way to do so. Just make sure the ''webadmin'' resource is started on your server and visit ''<nowiki>http://ServerIP:HttpPort/</nowiki>''. You can then use the two sections - ACLs and Groups. ACLs allow you to create your Access Control Lists - lists of rights. Groups allow you to group together collections of users and assign ACLs to them. For example, the ACLs section allows you to specify that the Admin ACL has access to the ''start'' console command. You can go to the Groups section and create an Admin ''group'' that has access to your Admin ''acl''. You can then add users to your Admin ''group''.

	===XML file===		===XML file===

Surge at 13:20, 24 December 2018

2018-12-24T13:20:04Z

← Older revision		Revision as of 13:20, 24 December 2018
Line 72:		Line 72:
	<object name="resource.admin" />		<object name="resource.admin" />
	<object name="resource.webadmin" />		<object name="resource.webadmin" />
	<object name="user.~~Ransom~~" />		<object name="user.Random" />
	</group>		</group>
	</syntaxhighlight>		</syntaxhighlight>

Botder: Added section about general.ModifyOtherObjects

2018-08-28T12:58:18Z

Added section about general.ModifyOtherObjects

@@ Line 104: / Line 104: @@
      </acl>
 </syntaxhighlight>
 ==Modifying the ACL==

Myonlake: Undo revision 58245 by WolfPiotrK2 (talk)

2018-08-16T12:51:57Z

Undo revision 58245 by WolfPiotrK2 (talk)

Show changes

WolfPiotrK2: Undo revision 58243 by Socialz (talk)

2018-08-16T12:49:59Z

Undo revision 58243 by Socialz (talk)

Show changes

Myonlake: Undo revision 58222 by WolfPiotrK2 (talk)

2018-08-16T12:49:35Z

Undo revision 58222 by WolfPiotrK2 (talk)

Show changes

WolfPiotrK2: Replaced content with "Image:mtapl.jpg"

2018-08-16T12:46:55Z

Replaced content with "Image:mtapl.jpg"

Show changes

Surge at 17:50, 5 August 2018

2018-08-05T17:50:49Z

← Older revision		Revision as of 17:50, 5 August 2018
Line 120:		Line 120:
	{{ACL functions}}		{{ACL functions}}

	[[hu:~~HU/~~ACL]]		[[hu:ACL]]
	[[Category:Scripting Concepts]]		[[Category:Scripting Concepts]]
	[[ru:Access Control List]]		[[ru:Access Control List]]
	[[Category:Tutorials]]		[[Category:Tutorials]]