docs: document the oper privilege model (types/classes, privileges, mode allowlist)

README + operators.md now cover the three permission axes (commands, named
privileges, usermode/chanmode allowlists) with the *,-token syntax, the standard
privileges table (users/auspex, channels/auspex, servers/auspex, channels/override,
users/flood, users/ignore-commonchans), and the connect-notice auspex redaction.
This commit is contained in:
Jean Chevronnet 2026-08-29 12:00:21 +00:00
parent 57c4cb0c26
commit bbe2682478
No known key found for this signature in database
GPG key ID: 439666D63A9477E4
2 changed files with 47 additions and 15 deletions

View file

@ -34,8 +34,10 @@ operational limit exposed as a config key.
8291), SASL, standard-replies, and `WATCH`/`MONITOR`/`SILENCE`/caller-id.
- **Operators**`OPER`/`KILL`/`WALLOPS`/`GLOBOPS`, the `SA*`/`CHG*`/`SET*`
override toolbox, x-lines (`K`/`G`/`Z`/`E`/`SHUN`/`QLINE`/`CBAN`/`RLINE`)
persisted to disk, staff prefix (`operprefix`/`OJOIN`), oper levels, rank-gated
`hidelist`/`hidemode`, and a reload-safe `REHASH`.
persisted to disk, a **type/class privilege model** (per-type commands, named
privileges like `users/auspex`/`channels/override`, and usermode/chanmode
allowlists — each `*`/`-` tunable), staff prefix (`operprefix`/`OJOIN`), oper
levels, rank-gated `hidelist`/`hidemode`, and a reload-safe `REHASH`.
- **Services & accounts** — SASL PLAIN/EXTERNAL relayed over the link, the `SVS*` /
`ENCAP` / `METADATA` interface, account-gated modes, and optional ircd-side
account registration (`REGISTER`/`VERIFY`).