Permissions update recommendations

Recently one of our admins was unable to ban a griefer due to not having permissions to do so. While we've had a handful of permissions problems over the past couple weeks, this one has me worried and has put me over the line. I've done nothing up until now because I figured the important permissions were already in place, but this is something that needs to be fixed as soon as possible. Carver and I were able to roll back and ban the griefer, but as many of you know it's better to stop a griefer early in the act rather than after the damage is done (LogBlock isn't always 100% effective either).

So, since any progress is better than none, I want to create a collaborative list of what perms each rank should have. This follows Hlot's rank idea from a month or so ago (Trial, Member, Moderator, Admin). If anyone has any input, post it here and I'll tweak the list.

Trial

• BattleNight: Cannot participate in BattleNight (unable to teleport out of Mereen).
  
• CGM: Can change their own game mode.
  
• GiveTo: Can give themselves any items.
  
• HeroChat: May only join global chat channel.
  
• HeroSneak: Cannot use this plugin.
  
• LWC: Can lock their own chests, doors, etc.
  
• MagicSpells: Cannot use any spells.
  
• Multiverse: Cannot teleport to any world other than Mereen.
  
• MyHome: Can set their home and warp to it using /home.
  
• MyWarp: Can set and warp to their own warps.
  
• NoCheat: Follow standard running, flying, etc restrictions.
  
• Tele++: Cannot use this plugin (obviously they can still verbally request tp's within Mereen).

Member

• BattleNight: Can participate in BattleNight.
  
• CGM: Can change game mode in creative worlds only.
  
• Factions: May create and join factions. Only usable in Westeros.
  
• GiveTo: Can give self items in creative worlds only.
  
• HeroSneak: Can use this plugin in any world.
  
• LogBlock: May look up and roll back themselves only.
  
• MagicSpells: May be given spells on a case-by-case basis. Only usable in Westeros.
  
• Multiverse: May access Ghis and Westeros.
  
• MyWarp: May create private warps.
  
• Tele++: May request tp's through /tp request [player | x y z] [reason]

Moderator

• Advanced Bans: Can kick and ban other players moderator and below.
  
• Disguise: May disguise as mobs in creative worlds.
  
• GiveTo: Can give items to others.
  
• HeroChat: May join staff chat channel.
  
• LogBlock: May perform standard lookups and rollbacks (hard cap on affected changes, to prevent full-world rollbacks).
  
• Multiverse: May access Myr, Ivalice, and world.
  
• Tele++: May teleport to, and summon, anyone other than admins.
  
• TimeShift: May use TimeShift in creative worlds.
  
• VanishNoPacket: May vanish and unvanish at any time.
  
• WorldEdit: May use WorldEdit (hard cap on affected changes).

Admin

• Advanced Bans: Can IP ban. Can pardon bans. Can kick and ban other players admin and below.
  
• Disguise: May disguise as players in creative worlds.
  
• LogBlock: May rollback without hard cap.
  
• LWC: May access locked doors, chests, etc. (for admin reasons only!)
  
• MagicSpells: May grant spells on a case-by-case basis.
  
• Multiverse: May access any world.
  
• MyHome: May access any player's home.
  
• MyWarp: May access other players' private warps.
  
• NoCheat: Can bypass all restrictions. Will see NoCheat reports.
  
• PermissionsBukkit: May moderate permissions as needed.
  
• Tele++: May teleport to, and summon, anyone including admins.
  
• VanishNoPacket: Can see vanished moderators and admins.
  
• WorldEdit: May use WorldEdit without hard caps.
  
• WorldGuard: May use /god and /slay.

How permissions work: if Trial can do something, so can Member, but not vice versa.

Another thing that's needed is two changes to HeroChat: rank colors and a way to distinguish staff chat. Rank needs to be identifiable by everyone, but currently only people with access to /perm can actually see someone's rank. Should rank colors be brought back (up to Hlot, last I heard he doesn't like the idea), I say we vote on what colors each rank gets.

Your choices for colors are: Black, Dark Blue, Dark Green, Dark Aqua, Dark Red, Purple, Gold, Gray, Dark Gray, Indigo, Bright Green, Aqua, Red, Pink, Yellow, and White (<-- that says white). Personally, gold has become the new white for me, so I don't feel it should be the admin color anymore.

Keep in mind all of this is still something Hlot would need to agree on and implement, this post is mainly to hopefully get the ball rolling.

Bring your input. If you think a rank should or shouldn't have a given permission leave it below, and also state what you think rank colors should be if they're re-implemented.

About the 'Trial World', Mereen already has that duty right now and I think we should keep it like that.
Otherwise it might split up the community even more.

FSCarver wrote:About the 'Trial World', Mereen already has that duty right now and I think we should keep it like that.
Otherwise it might split up the community even more.

I agree, just wanted to see if anyone else had this opinion. Fixed.

sirrus86 wrote:Recently one of our admins was unable to ban a griefer due to not having permissions to do so. While we've had a handful of permissions problems over the past couple weeks, this one has me worried and has put me over the line. I've done nothing up until now because I figured the important permissions were already in place, but this is something that needs to be fixed as soon as possible. Carver and I were able to roll back and ban the griefer, but as many of you know it's better to stop a griefer early in the act rather than after the damage is done (LogBlock isn't always 100% effective either).

So, since any progress is better than none, I want to create a collaborative list of what perms each rank should have. This follows Hlot's rank idea from a month or so ago (Trial, Member, Moderator, Admin). If anyone has any input, post it here and I'll tweak the list.

Trial

• BattleNight: Cannot participate in BattleNight (unable to teleport out of Mereen).
  
• CGM: Can change their own game mode.
  
• GiveTo: Can give themselves any items.
  
• HeroChat: May only join global chat channel.
  
• HeroSneak: Cannot use this plugin.
  
• LWC: Can lock their own chests, doors, etc.
  
• MagicSpells: Cannot use any spells.
  
• Multiverse: Cannot teleport to any world other than Mereen.
  
• MyHome: Can set their home and warp to it using /home.
  
• MyWarp: Can set and warp to their own warps.
  
• NoCheat: Follow standard running, flying, etc restrictions.
  
• Tele++: Cannot use this plugin (obviously they can still verbally request tp's within Mereen).

Member

• BattleNight: Can participate in BattleNight.
  
• CGM: Can change game mode in creative worlds only.
  
• Factions: May create and join factions. Only usable in Westeros.
  
• GiveTo: Can give self items in creative worlds only.
  
• HeroSneak: Can use this plugin in any world.
  
• LogBlock: May look up and roll back themselves only.
  
• MagicSpells: May be given spells on a case-by-case basis. Only usable in Westeros.
  
• Multiverse: May access Ghis and Westeros.
  
• MyWarp: May create private warps.
  
• Tele++: May request tp's through /tp request [player | x y z] [reason]

Moderator

• Advanced Bans: Can kick and ban other players moderator and below.
  
• Disguise: May disguise as mobs in creative worlds.
  
• GiveTo: Can give items to others.
  
• HeroChat: May join staff chat channel.
  
• LogBlock: May perform standard lookups and rollbacks (hard cap on affected changes, to prevent full-world rollbacks).
  
• Multiverse: May access Myr, Ivalice, and world.
  
• Tele++: May teleport to, and summon, anyone other than admins.
  
• TimeShift: May use TimeShift in creative worlds.
  
• VanishNoPacket: May vanish and unvanish at any time.
  
• WorldEdit: May use WorldEdit (hard cap on affected changes).

Admin

• Advanced Bans: Can IP ban. Can pardon bans. Can kick and ban other players admin and below.
  
• Disguise: May disguise as players in creative worlds.
  
• LogBlock: May rollback without hard cap.
  
• LWC: May access locked doors, chests, etc. (for admin reasons only!)
  
• MagicSpells: May grant spells on a case-by-case basis.
  
• Multiverse: May access any world.
  
• MyHome: May access any player's home.
  
• MyWarp: May access other players' private warps.
  
• NoCheat: Can bypass all restrictions. Will see NoCheat reports.
  
• PermissionsBukkit: May moderate permissions as needed.
  
• Tele++: May teleport to, and summon, anyone including admins.
  
• VanishNoPacket: Can see vanished moderators and admins.
  
• WorldEdit: May use WorldEdit without hard caps.
  
• WorldGuard: May use /god and /slay.

How permissions work: if Trial can do something, so can Member, but not vice versa.

Another thing that's needed is two changes to HeroChat: rank colors and a way to distinguish staff chat. Rank needs to be identifiable by everyone, but currently only people with access to /perm can actually see someone's rank. Should rank colors be brought back (up to Hlot, last I heard he doesn't like the idea), I say we vote on what colors each rank gets.

Your choices for colors are: Black, Dark Blue, Dark Green, Dark Aqua, Dark Red, Purple, Gold, Gray, Dark Gray, Indigo, Bright Green, Aqua, Red, Pink, Yellow, and White (<-- that says white). Personally, gold has become the new white for me, so I don't feel it should be the admin color anymore.

Keep in mind all of this is still something Hlot would need to agree on and implement, this post is mainly to hopefully get the ball rolling.

Bring your input. If you think a rank should or shouldn't have a given permission leave it below, and also state what you think rank colors should be if they're re-implemented.

I like this! The new color ranking thing would be cool :3 Bright green for admins would be badass

This is an epic idea though, but we need to find a system for ranking up people. As Trial members will want to know how to get promoted to member and so on. Also I want it old school for Moderators (Editors) and have it Aqua.

I assume Trial will just be temporary until we are sure they're not griefers.
To get promoted beyond Member, they'll just have to earn it like it's always been.

I'll send you the permissions files and you can make whatever changes you see fit. As for the colors I stopped worrying about that a while ago because I think it's pointless. This isn't the military, ranks don't matter beyond what you can do, and I think everyone knows their own rank. That being said I'm not against them, and if you found a way to make HeroChat play nice with PermissionsBukkit in that regard, go for it.

Question, what about editors?

FyreCat wrote:Question, what about editors?

Merged into Moderator group.

FSCarver wrote:

FyreCat wrote:Question, what about editors?

Merged into Moderator group.

Ah okay

I think Trials should be white
Members could be Gray
Mods could be Dark Aqua
and Admin could be Gold,
Thats just my opinion though

I agree with Sirrus about the gold.
Just don't take colors that are too bright, and are neutral.

Trials:White
Members: Gold
Moderators: Indigo or Dark Blue
Admins: Dark Gray

FSCarver wrote:I agree with Sirrus about the gold.
Just don't take colors that are too bright, and are neutral.

Trials:White
Members: Gold
Moderators: Indigo or Dark Blue
Admins: Dark Gray

Dark Gray might not show up against the black background of chat

HeyLookoverthere wrote:I'll send you the permissions files and you can make whatever changes you see fit. As for the colors I stopped worrying about that a while ago because I think it's pointless. This isn't the military, ranks don't matter beyond what you can do, and I think everyone knows their own rank. That being said I'm not against them, and if you found a way to make HeroChat play nice with PermissionsBukkit in that regard, go for it.

Will do. The permissions file will take awhile to complete so if anyone has any other suggestions now's the time to speak up.

I'm going to download HeroChat and PermissionsBukkit and see if I can get them to work together. Worse case I can modify HeroChat to play nice. Whatever happens I'll make sure it's easy to manage and automatic. If anyone sees my test server active feel free to come in, but I'll probably be switching it on and off a lot for testing.

LinkCLX wrote:Dark Gray might not show up against the black background of chat

Correct, dark colors are harder to view in chat, evidenced by the old Op color which was dark red.

Also don't forget about the new status/note system.
Right now no one has permissions for it.

Correct, dark colors are harder to view in chat, evidenced by the old Op color which was dark red.

I found that very easy to read...

FyreCat wrote:

sirrus86 wrote:Correct, dark colors are harder to view in chat, evidenced by the old Op color which was dark red.

I found that very easy to read...

It gave me migraines. And I'm not fun when I have a migraine. Ask Carver.

sirrus86 wrote:

FyreCat wrote:

sirrus86 wrote:Correct, dark colors are harder to view in chat, evidenced by the old Op color which was dark red.

I found that very easy to read...

It gave me migraines. And I'm not fun when I have a migraine. Ask Carver.

Yeah, you would have more fun hitting your fingertops with a hammer, then hanging around with a pissed off Sirrus.

Permissions file has been completed. No more asking "what do I get with this rank", I'll give a detailed rundown of what each rank can do:

Trail
* Rank is called "default" in permissions; PermissionsBukkit freaks out if a group called default doesn't exist, and always picks it as the group new players are assigned to.
+ May set their home, and create a limited number of public warps.
+ Can lock chests, doors, etc.
+ Can use /gme to give themselves items.
+ Can use /gm to change their own game mode.
- Are restricted to Mereen.
- Are unable to use spells.
- Are unable to join BattleNight.
- Can only speak in chat.

Member
* Anyone who was previously in default has been promoted to Member! Note: anyone may be demoted back to Trial on a case-by-case basis.
+ All benefits from Trial rank carry over.
+ Can access Ghis, Warzone, and Westeros.
+ Can learn and use spells in Westeros.
+ Can join BattleNight.
+ Can create and join factions in Westeros.
+ Can create their own books with BookWorm.
+ Can use tells and emotes in chat.
+ Can use courier to compose and send mail.
+ May have an iConomy balance. Can also make payments.
+ Can toggle sneaking using /sneak command.
+ Can create unlimited private warps.
+ May view their own info in LogBlock.
+ Can like/dislike other players and view their own status via McftProfiler.
+ Can use SilkSpawners to mine mob spawners and place them. Note: Placing hostile mob spawners in someone else's house without their consent is considered griefing.
+ Can request tp's using /tpp request [player|x y z] [reason].
- Will automatically be kicked from staff chat upon demotion from Moderator.

Moderator
* Anyone who previously had the rank of Moderator or Editor (barring a few exceptions) has been moved to this rank.
+ All benefits from Member rank carry over.
+ Can access Ivalice, Myr, and world.
+ Can ban and kick. (If for whatever reason AdvanceBans isn't working, permissions for the default Bukkit ban and kick commands are given as well)
+ Can change the gamemode of others. (Again, if CGM isn't working, /gamemode command can be used)
+ Can use /disguise to disguise as mobs.
+ Can use /gto to give items to others. (If GiveTo isn't working, /give command can be used)
+ Will automatically join staff chat upon promotion from Member.
+ Can check iConomy balances of others.
+ Can lookup, rollback, and tp via LogBlock.
+ Can lookup detailed information and leave notes via McftProfiler.
+ Can view (but not change) the permissions of others using /perm dump <name> [page#]. Think of it as training (see below).
+ Can use OpenInv to view the inventory of others.
+ Can change mobspawners.
+ Can tp to, and summon, other players, except Admins. (If Tele++ isn't working, /tp <player1> <player2> can be used)
+ Can vanish.
And of course, the big one:
+ Can use WorldEdit.

Admin
* FSCarver, Hafiz550, heylookoverthere, JJoiler, onlycoops, sirrus86, and TheClownOfCrime are the only members of this group at this time. If others who were previously editors are meant to be this rank (and are approved to be) they will be promoted.
+ All benefits from Moderator rank carry over.
+ Can access any world at any time.
+ Can ban ip's and pardon. (If AdvancedBans is not working, the default Bukkit commands can be used)
+ Can change biomes.
+ Cannot have their gamemode changed by Moderators or other Admins (unless CGM stops working).
+ Can disguise as players. Can also see through disguises.
+ Can toggle and reload some plugins.
+ Have admin control of Factions, iConomy, McftProfiler, MyHome, MyWarp, and several other plugins.
+ Can use LogBlock without restrictions.
+ Can open any locked door, chest, etc.
+ Can bypass NoCheat restrictions and are notified of all infractions.
+ Can tp to anyone, including Admins.
+ Can see vanished players.
+ Can use WorldEdit without restrictions.
+ Can use /god, /ungod, /slay [player], and /stoplag [-c].
And two that might be new for some of you:
+ Can add, remove, and modify permissions of any player or group. If you don't know or feel confident about using this then PLEASE ask me or Hlot first.
+ Can op and deop themselves or anyone else. There is one, and only one situation where this should be used, and that's when you must use an important command (like ban) but can't due to an issue with permissions. The only people who should use this, or should have this used on them, are Admins; under no circumstances should anyone of lower rank be opped.
Abuse or misuse of either of these commands can result in losing rights to use both of them, demotion, and/or ban.

Finally, most worlds will be treated as creative worlds, and thus players will get all permissions listed above. The exceptions are as follows:
Ghis
- Gamemode cannot be changed from survival.
- Cannot use /gme or /gto to acquire items.
- Cannot disguise as mobs or players.
- Cannot use WorldEdit.
- Cannot change spawners.
Warzone
* Same restrictions as Ghis.
- Cannot use warps, /home, or tp.
- Cannot vanish.
* Admins may change gamemodes and use WorldEdit ONLY to create, fix, or modify arenas.
* Other players may be given temporary rights to use creative and WorldEdit for the purpose of creating their own arenas.

---

This is the easier, more important of the two tasks, so I've completed it first. If anyone has anything to add still let me know; I can change these permissions at any time.

The second task, making chat colors work without having to move to another permissions plugin, may take me a bit longer so bear with me. Again I'll be testing this on my test server, so if you wish to help or just wanna hang out feel free to come over.

I was able to change JJ his gamemode in World, which I should not be able to do.
Also Members seem to login without showing a 'Player has joined the game' message.

FSCarver wrote:I was able to change JJ his gamemode in World, which I should not be able to do.
Also Members seem to login without showing a 'Player has joined the game' message.

I blame Hlot! He made changes to some stuff before it went live.

Jokes aside I'll see what I can do. JJ's an admin; he should be able to go to any world. Sounds like he got demoted somehow (happened to a few other people too).

In the future if you ever notice this there's a fairly easy way to fix it:
1) Type /perm player groups <name> to get a player's group. Make sure they're in the proper group. Groups are "default", "Member", "Moderator", and "Admin". And yes, group names ARE case-sensitive.
2) If they're in the wrong group, type /perm player setgroup <name> <group>. This puts them in the correct group, and they should regain the proper permissions.

Okay, so permissions have been a little weird since they got updated...

Going forward if anyone finds they can't do something they feel they should be able to (access certain worlds, ban, switch to creative in certain worlds, etc), and Hlot's not around to fix it, leave a message here and I'll fix stuff when I can.

I tried logging in last night to do some building in Myr. Didn't have access to go there anymore.
I logged in the night before that and was able to go there, but couldn't change my game mode to Creative.

Also, when I was there two nights ago, mobs were all over the damn place. Is Myr not a creative world anymore? =/

No brown?!? ;O
I see how it is....

dustynbush wrote:I tried logging in last night to do some building in Myr. Didn't have access to go there anymore.
I logged in the night before that and was able to go there, but couldn't change my game mode to Creative.

Also, when I was there two nights ago, mobs were all over the damn place. Is Myr not a creative world anymore? =/

Myr is still creative. How I structured the permissions is basically anywhere you go, other than Ghis and Warzone, is treated as creative. And you're a moderator, which means you explicitly have access to Myr. I'll make sure you're in the right group, beyond that we'd have to be on at the same time so I could check your full perms list and see if anything's missing.

Mobs showing up in Myr is a Multiverse config issue. I'll fix it while checking your rank.