Skip to content

Permission resolving

weaondara edited this page Nov 3, 2019 · 3 revisions

When a user is checked for a permission the following steps are performed:

  • Bukkit: if allowops is set to true and the player is op all permissions are granted
  • for all groups the player is in (the order of group depends on the rank of the group; weight is ignored)
    • get the group's global permissions
    • get the group's server permissions
    • get the group's world permissions
  • get the user's global permissions
  • get the user's server permissions
  • get the user's world permissions
  • the go through the collected permissions list from top to down and check for the permission
  • is the wasn't any rule for this permission (permission neither set nor revoked) superperms will be consulted
  • in BP4 this resolving mode is referred to as SEQUENTIAL in the config

BP4 also provides a BEST_MATCH mode where the permission which matches best to permission to check is used e.g. assume a user has the permissions -test.test1 and test.* set and is checked for test.test1 then the user does not have this permission. The SEQUENTIAL mode will return true for this permission test hence the user is allowed to do what the permission allows.

Clone this wiki locally