2

I am trying to do away with OP on my server. To achieve this I am trying to use permissions with Group Manager (from essentials).

I have an issue where I am trying to restrict only the ban, op, deop, stop, reload, whitelist and certain group manager commands.

I have deoped myself and removed my username from the config files and added myself to the Admin group but I could still op myself and gain access to the rest of the commands.

Here is my globalgroups.yml file:

# These groups only contain permission nodes.
#
# **** You can NOT add anything other than permission nodes ****
# **** This is NOT where you set up the groups which you give to users! ****
# **** goto groupmanager/worlds/worldname/groups.yml if you want to set the actual groups! ****
#
# These collections are to be inherited in your different worlds groups.yml's
# They can also be added as one of a users subgroups, but NOT as a primary group.
# These collections are available to ALL group and user yml's.
#
# Add to and customize these groups to fit your needs.

groups:
  g:default:
    permissions:
    - groupmamager.notify.self
    - multiverse.access.*
    - multiverse.portal.access.*
    - essentials.signs.use.*
    - essentials.help
    - essentials.helpop
    - essentials.list
    - essentials.motd
    - essentials.rules
    - bukkit.command.help
    - essentials.me
    - essentials.jail.allow.help
    - essentials.jail.allow.helpop
    - essentials.jail.allow.rules
    - essentials.tpaccept
    - essentials.tpdeny
    - essentials.worth
    - essentials.balance
    - essentials.afk.auto
    - essentials.sethome.bed

  g:powerusers:
    permissions:
    - groupmanager.notify.self
    - groupmanager.listgroups
    - groupmanager.manwhois
    - groupmanager.notify.other
    - multiverse.portal.access.*
    - multiverse.access.*
    - multiverse.core.confirm
    - multiverse.core.info
    - multiverse.core.list.environments
    - multiverse.core.list.who
    - multiverse.core.list.worlds
    - bukkit.command.plugins
    - bukkit.command.say
    - bukkit.command.tell
    - bukkit.command.whitelist.list
    - essentials.signs.use.*
    - essentials.signs.create.disposal
    - essentials.help
    - essentials.helpop
    - essentials.list
    - essentials.motd
    - essentials.rules
    - bukkit.command.help
    - essentials.mail
    - essentials.mail.send
    - essentials.me
    - essentials.msg
    - essentials.msg.color
    - essentials.msg.format
    - essentials.nick
    - essentials.pay
    - essentials.ping
    - essentials.nick.color
    - essentials.nick.others
    - essentials.realname
    - essentials.top
    - essentials.whois
    - essentials.workbench
    - essentials.tpaccept
    - essentials.tpdeny
    - essentials.tpa
    - treeassist.destroy.*
    - treeassist.replant
    - treeassist.toggle
    - essentials.balance
    - essentials.sell
    - essentials.worth
    - essentials.afk.auto
    - essentials.afk.kickexempt
    - essentials.chat.color
    - essentials.sethome.bed

  g:admin:
    permissions:
    - '*'
    - -essentials.unban
    - -essentials.unbanip
    - -essentials.banip
    - -essentials.tempban
    - -essentials.ban
    - -bukkit.command.reload
    - -bukkit.command.ban.player
    - -bukkit.command.unban.player
    - -bukkit.command.unban.ip
    - -bukkit.command.ban.ip
    - -bukkit.command.op.*
    - -bukkit.command.stop
    - -bukkit.command.save.disable
    - -bukkit.command.whitelist.enable
    - -bukkit.command.whitelist.disable
    - -bukkit.command.whitelist.add
    - -bukkit.command.whitelist.remove
    - -groupmanager.mantogglevalidate
    - -groupmanager.mantogglesave
    - -groupmanager.mangaddv
    - -groupmanager.mangdelv
    - -groupmanager.mangaddp
    - -groupmanager.mangdelp
    - -groupmanager.mangdeli
    - -groupmanager.manuaddv
    - -groupmanager.manudelv
    - -groupmanager.manuaddp
    - -groupmanager.manudelp
    - -groupmanager.manuadd
    - -groupmanager.manudel
    - -groupmanager.manuaddsub
    - -groupmanager.manudelsub
    - -groupmanager.manpromote
    - -groupmanager.mandemote

  g:owner:
    permissions:
    - '*'

All of my other permissions (per world) pull from the global groups file so I only need to edit the permissions once.

  • Are there any server logs that could signify an error in syntax? Also, do you have access only to the "op" command, or can you use the other negative nodes? – Poks999 Mar 5 '14 at 22:27
1

From looking at the wiki, your problem lies in the '*' in the first line of your Admin group.

You can also give the * permission on itself, without giving a plugin, this would cause the group to have access to every command in every plugin.

You're still giving yourself all permissions as an admin, with the use of the '*' character.

  • So what I understand from you post is that the wildcard is overriding the negative nodes? If so then can you give me an example for what I should do? – Elliot Labs LLC Feb 19 '14 at 17:41
  • That's odd... Last night, I even copied your nodes over so I could look more easily in a larger font... I'm looking at my copy right now and it doesn't have the negative nodes. My answer seems to be completely incorrect. Sorry! – LLF Feb 20 '14 at 0:51
  • So my permissions were right? – Elliot Labs LLC Feb 20 '14 at 13:54
  • Probably. I'll go through it again when I get home. My internet went out last night, so I couldn't do more research. But don't you worry, we'll get ya figured out. If not me, some other Arqadian will. =) – LLF Feb 20 '14 at 18:12
  • Any updates on if it works? – Elliot Labs LLC Feb 21 '14 at 12:37
0

Use -essentials.* Instead of - -essentials.*. If it still doesnt work make sure you use 4 SPACE not TAB before the -

  • I have never used the TAB key because YAML is not compatible with the TAB key. Thanks for your help but I had to do it the manual way. – Elliot Labs LLC Mar 9 '14 at 1:38
0

I have tried all of the above and more and still didn't get it to work.

Here is the way I was trying to avoid but eventual had to do: Give each permission manually...

Here is my global groups file which is the file which all of the permissions are read from:

# These groups only contain permission nodes.
#
# **** You can NOT add anything other than permission nodes ****
# **** This is NOT where you set up the groups which you give to users! ****
# **** goto groupmanager/worlds/worldname/groups.yml if you want to set the actual groups! ****
#
# These collections are to be inherited in your different worlds groups.yml's
# They can also be added as one of a users subgroups, but NOT as a primary group.
# These collections are available to ALL group and user yml's.
#
# Add to and customize these groups to fit your needs.

groups:
  g:default:
    permissions:
    - groupmamager.notify.self
    - multiverse.access.*
    - multiverse.portal.access.*
    - essentials.signs.use.*
    - essentials.help
    - essentials.helpop
    - essentials.list
    - essentials.motd
    - essentials.rules
    - bukkit.command.help
    - essentials.me
    - essentials.jail.allow.help
    - essentials.jail.allow.helpop
    - essentials.jail.allow.rules
    - essentials.tpaccept
    - essentials.tpdeny
    - essentials.worth
    - essentials.balance
    - essentials.afk.auto
    - essentials.sethome.bed
    - bukkit.command.ban.list
    - essentials.recipe
    - essentials.ban.notify


  g:powerusers:
    permissions:
    - essentials.recipe
    - groupmanager.notify.self
    - groupmanager.listgroups
    - groupmanager.manwhois
    - groupmanager.notify.other
    - multiverse.portal.access.*
    - multiverse.access.*
    - multiverse.core.confirm
    - multiverse.core.info
    - multiverse.core.list.environments
    - multiverse.core.list.who
    - multiverse.core.list.worlds
    - bukkit.command.plugins
    - bukkit.command.say
    - bukkit.command.tell
    - bukkit.command.whitelist.list
    - essentials.signs.use.*
    - essentials.signs.create.disposal
    - essentials.help
    - essentials.helpop
    - essentials.list
    - essentials.motd
    - essentials.rules
    - bukkit.command.help
    - essentials.mail
    - essentials.mail.send
    - essentials.me
    - essentials.msg
    - essentials.msg.color
    - essentials.msg.format
    - essentials.nick
    - essentials.pay
    - essentials.ping
    - essentials.nick.color
    - essentials.nick.others
    - essentials.realname
    - essentials.top
    - essentials.whois
    - essentials.workbench
    - essentials.tpaccept
    - essentials.tpdeny
    - essentials.tpa
    - treeassist.destroy.*
    - treeassist.replant
    - treeassist.toggle
    - essentials.balance
    - essentials.sell
    - essentials.worth
    - essentials.afk.auto
    - essentials.afk.kickexempt
    - essentials.chat.color
    - essentials.sethome.bed
    - bukkit.command.ban.list
    - essentials.ban.notify

  g:admin:
    permissions:
    - bukkit.command.version
    - bukkit.command.plugins
    - bukkit.command.timings
    - bukkit.command.tell
    - bukkit.command.kill
    - bukkit.command.me
    - bukkit.command.help
    - bukkit.command.kick
    - bukkit.command.ban.list
    - bukkit.command.teleport
    - bukkit.command.give
    - bukkit.command.save.perform
    - bukkit.command.list
    - bukkit.command.say
    - bukkit.command.whitelist.list
    - bukkit.command.time.*
    - bukkit.command.gamemode
    - bukkit.command.xp
    - bukkit.command.toggledownfall
    - bukkit.command.defaultgamemode
    - bukkit.command.seed
    - bukkit.command.enchant
    - bukkit.command.weather.*
    - bukkit.command.clear
    - bukkit.command.difficulty
    - bukkit.command.spawnpoint
    - bukkit.command.gamerule
    - bukkit.command.effect
    - bukkit.command.setidletimeout
    - bukkit.command.setworldspawn
    - bukkit.command.achievement
    - bukkit.broadcast
    - essentials.itemspawn.*
    - essentials.worth
    - essentials.worlds.*
    - essentials.world
    - essentials.workbench
    - essentials.whois
    - essentials.weather
    - essentials.warps.*
    - essentials.warp.*
    - essentials.warp
    - essentials.vanish.*
    - essentials.vanish
    - essentials.unlimited.*
    - essentials.unlimited
    - essentials.tree
    - essentials.tptoggle.*
    - essentials.tptoggle
    - essentials.tppos
    - essentials.tpohere
    - essentials.tpo
    - essentials.tphere
    - essentials.tpdeny
    - essentials.tpall
    - essentials.tpahere
    - essentials.tpaccept
    - essentials.tpaall
    - essentials.tpa
    - essentials.tp.*
    - essentials.tp
    - essentials.top
    - essentials.togglejail.*
    - essentials.togglejail
    - essentials.time.*
    - essentials.time
    - essentials.thunder
    - essentials.teleport.*
    - essentials.suicide
    - essentials.sudo
    - essentials.sudo.exempt
    - essentials.speed.*
    - essentials.speed
    - essentials.spawnmob.*
    - essentials.spawnmob
    - essentials.spawner.*
    - essentials.spawn.*
    - essentials.spawn
    - essentials.socialspy.*
    - essentials.socialspy
    - essentials.sleepingignored
    - essentials.signs.*
    - essentials.setworth
    - essentials.setwarp
    - essentials.setspawn
    - essentials.setjail
    - essentials.sethome.*
    - essentials.sethome
    - essentials.sell
    - essentials.seen.*
    - essentials.seen
    - essentials.rules
    - essentials.repair.*
    - essentials.repair
    - essentials.remove
    - essentials.recipe
    - essentials.realname
    - essentials.ptime.*
    - essentials.ptime
    - essentials.protect.*
    - essentials.protect
    - essentials.powertooltoggle
    - essentials.powertool.*
    - essentials.powertool
    - essentials.ping
    - essentials.pay
    - essentials.oversizedstacks
    - essentials.nick.*
    - essentials.nick
    - essentials.near
    - essentials.mute.*
    - essentials.mute
    - essentials.msg.*
    - essentials.msg
    - essentials.motd
    - essentials.more
    - essentials.me
    - essentials.mail.*
    - essentials.mail
    - essentials.list.*
    - essentials.list
    - essentials.lightning.*
    - essentials.lightning
    - essentials.kits.*
    - essentials.kits
    - essentials.killall
    - essentials.kill.force
    - essentials.kill
    - essentials.kick.notify
    - essentials.kick
    - essentials.jump
    - essentials.joinfullserver
    - essentials.jails
    - essentials.itemspawn.*
    - essentials.itemdb
    - essentials.item
    - essentials.invsee.*
    - essentials.invsee
    - essentials.info
    - essentials.ignore
    - essentials.home.*
    - essentials.home
    - essentials.helpop.*
    - essentials.helpop
    - essentials.help.*
    - essentials.help
    - essentials.heal.*
    - essentials.heal
    - essentials.hat
    - essentials.god.*
    - essentials.god
    - essentials.give
    - essentials.getpos.*
    - essentials.getpos
    - essentials.geoip.*
    - essentials.gc
    - essentials.gamemode.*
    - essentials.gamemode
    - essentials.fly.*
    - essentials.fly
    - essentials.firework.*
    - essentials.firework
    - essentials.fireball
    - essentials.feed.*
    - essentials.feed
    - essentials.ext
    - essentials.exp.*
    - essentials.exp
    - essentials.essentials
    - essentials.enderchest.*
    - essentials.enderchest
    - essentials.enchantments.*
    - essentials.enchant
    - essentials.eco.*
    - essentials.eco
    - essentials.depth
    - essentials.delwarp
    - essentials.deljail
    - essentials.delhome.*
    - essentials.delhome
    - essentials.customtext
    - essentials.compass
    - essentials.clearinventory.*
    - essentials.clearinventory
    - essentials.chat.*
    - essentials.burn
    - essentials.build.*
    - essentials.build
    - essentials.broadcast
    - essentials.break.*
    - essentials.break
    - essentials.book.*
    - essentials.book
    - essentials.bigtree
    - essentials.ban.notify
    - essentials.balancetop
    - essentials.balance.*
    - essentials.balance
    - essentials.backup
    - essentials.back.*
    - essentials.back
    - essentials.afk.*
    - essentials.afk
    - essentials.itemspawn.*
    - alldayallnight.admin
    - worldedit.*
    - treeassist.*
    - multiverse.*
    - prism.*
    - lagg.*
    - groupmanager.manwhois
    - groupmanager.manulistp
    - groupmanager.manulistv
    - groupmanager.listgroups
    - groupmanager.manglistp
    - groupmanager.manglistv
    - groupmanager.mancheckw
    - groupmanager.notify.*
0

Connect the - with essentials and all other permissions. Ex: -essentials.kits.PvP

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.