echo/echoIRCd
1
1
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

opers: wire eight more privileges over their raw is_oper gates

Browse source 
Convert the remaining oper bypass/visibility gates to named privileges:
channels/restricted-create, channels/ignore-nonicks, users/ignore-callerid,
users/secret-whois, users/ignore-restrictmsg, servers/use-disabled-commands,
servers/ignore-securelist, servers/ignore-blockamsg. The override class gains
the channel/message/anti-spam bypasses, auspex gains secret-whois +
ignore-callerid, server gains use-disabled-commands; netadmin keeps all via
privs=*. Docs updated; verified restricted-create + ignore-nonicks live.
This commit is contained in:
Jean Chevronnet 2026-08-29 13:11:08 +00:00
parent bbe2682478
commit 5dfedb5091
No known key found for this signature in database
GPG key ID: 439666D63A9477E4
11 changed files with 76 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

14
docs/operators.md
View file

@ -86,8 +86,22 @@ command. Assign them via `privs=` on a class or type (`*` = all, `-x` removes on
| `channels/auspex` | secret/private (`+s`/`+p`) channels and their members in `/LIST`, `/WHO`, `/WHOIS`, `/NAMES` |
| `servers/auspex` | U-lined/services servers otherwise hidden by `hideservices` in `/MAP` & `/LINKS` |
| `channels/override` | join through `+k`/`+b`/`+i`/`+l`/`+z`/`+R`/`+J`, a `CBAN`, and the max-channels cap |
| `channels/restricted-create` | create a new channel while `restrictchans` is on |
| `channels/ignore-nonicks` | change nick while on a `+N` (no-nick-change) channel |
| `users/flood` | exemption from the message- and join-flood limits |
| `users/ignore-commonchans` | message a `+c` user without sharing a common channel |
| `users/ignore-callerid` | message a `+g` (caller-ID) user without being on their accept list |
| `users/ignore-restrictmsg` | private-message anyone while `restrictmsg` is on |
| `users/secret-whois` | `/WHOIS` a `+W` (showwhois) user without notifying them |
| `servers/use-disabled-commands` | use a command turned off by `disabled_commands` |
| `servers/ignore-securelist` | bypass the `securelist` LIST hold for fresh connections |
| `servers/ignore-blockamsg` | send `/AMSG`-style multi-channel messages the `blockamsg` module blocks |
The built-in `override` class carries the channel/message/anti-spam bypasses
(`channels/restricted-create`, `channels/ignore-nonicks`, `users/ignore-restrictmsg`,
`servers/ignore-securelist`, `servers/ignore-blockamsg`), `auspex` carries the
see-through-privacy set (the three `*/auspex` plus `users/secret-whois` and
`users/ignore-callerid`), and `servers/use-disabled-commands` sits on the `server` class.
## Snomasks