[SOLVED] RBAC doubt

[susumakusu]

Hello, I have an issue with RBAC system, could you help me?

I want to deny permissions to gm lvl 1 account. So I put sec level 1 to account in "account_access" table. Next step, in "rbac_account_permissions" table I denny the specific permission ID.



This deny all ticket commands.

But when I restart and I log into the account and try to use .ticket commands I can use it. What am I doing wrong.

Sorry my bad english.

Thank you.

 

[Sylica]

Hello, I have an issue with RBAC system, could you help me?

I want to deny permissions to gm lvl 1 account. So I put sec level 1 to account in "account_access" table. Next step, in "rbac_account_permissions" table I denny the specific permission ID.

View attachment 565

This deny all ticket commands.

But when I restart and I log into the account and try to use .ticket commands I can use it. What am I doing wrong.

Sorry my bad english.

Thank you.

If you want to deny a permissions, you need to use the permission id with the command and set granted to 0. Takes some time to get use to. I don't even use "account_access" table.
Don't think you have all permissions on deny. If you need more help, let me know.

Run this command to see all commands with: ticket

select * from rbac_permissions where id LIKE '%ticket%' OR name LIKE '%ticket%';

 

[susumakusu]

If you want to deny a permissions, you need to use the permission id with the command and set granted to 0. Takes some time to get use to. I don't even use "account_access" table.
Don't think you have all permissions on deny. If you need more help, let me know.

Run this command to see all commands with: ticket

select * from rbac_permissions where id LIKE '%ticket%' OR name LIKE '%ticket%';

I have done exactly what you say, butt it doesnt work.

 

[Sylica]

I have done exactly what you say, butt it doesnt work.

Hmm, are you reloading rbac?

 

[susumakusu]

Hmm, are you reloading rbac?

Of course I restarted the whole server

 

[Sylica]

Of course I restarted the whole server

For a shorter reload, just use .reload rbac command. Saves some time.

Anyways, did you get it working?