DocsAdmin Menu

Permissions and roles

Owners, default roles and permission nodes.

Not released yet. These pages are written from the code of manniche_admin and can change before the release.

Owners

Owners have every permission. A player is an owner if one of these is true:

  • Their identifier is in Config.Owners (config/server.lua).
  • They have the ACE set in Config.OwnerAce (default manniche_admin.owner).
  • They belong to the root role (Config.RootRole, default owner).
add_ace group.admin manniche_admin.owner allow

Find your identifier with /myid, in the txAdmin player list or with status in the console.

Default roles

These roles are created on first start if the roles table is empty. They can be edited in the panel. A higher priority outranks a lower one. A staff member can never edit a role with priority equal to or above their own.

RolePriorityInheritsOwn permissions
owner100none* (root)
headadmin80adminstaff.view, staff.create, staff.edit, staff.delete, roles.manage, jobs.create, jobs.edit, jobs.delete, database.view, server.resources, logs.delete
admin60moderatorplayers.ban, players.noclip, players.jail, inventory.edit, inventory.give, inventory.remove, economy.view, economy.give, economy.remove, economy.set, jobs.assign, server.view, server.announce, entities.spawn, entities.delete, world.blips
moderator40supportplayers.teleport, players.bring, players.freeze, players.revive, players.heal, players.spectate, players.kick, players.warn, players.jail, inventory.view, jobs.view, logs.view, world.blips
support20noneplayers.view, staff.view

Permission nodes

Defined in config/permissions.lua and checked on the server. The permission matrix in the Staff tab is generated from this list.

GroupNodes
Playersplayers.view, players.teleport, players.bring, players.freeze, players.revive, players.heal, players.spectate, players.kick, players.warn, players.ban, players.noclip, players.jail
Entities and blipsentities.spawn, entities.delete, world.blips
Inventoryinventory.view, inventory.edit, inventory.give, inventory.remove, inventory.search, stash.view, stash.edit
Economyeconomy.view, economy.give, economy.remove, economy.set
Jobsjobs.view, jobs.assign, jobs.create, jobs.edit, jobs.delete
Staffstaff.view, staff.create, staff.edit, staff.delete, roles.manage
Databasedatabase.view, database.edit, database.browse
Integrationsintegrations.phone
Serverserver.view, server.resources, server.announce, server.world
Logslogs.view, logs.delete
database.browse (raw table browser) and integrations.phone (private phone data via lb-phone) are not given to any default role except owner. Grant them deliberately.