2 <title>Oper privileges</title>
4 <title>Meanings of oper privileges</title>
6 These are flags in operator{}.
7 The letter appears after opering up and in /stats o; an uppercase
8 letter means the privilege is possessed, lowercase means it is not.
11 <title>admin (A), server administrator</title>
13 Various privileges intended for server administrators.
14 Among other things, this automatically sets umode +a and allows
19 <title>remoteban (B), set remote bans</title>
21 This grants the ability to use the ON argument on KLINE/XLINE/RESV
22 and UNKLINE/UNXLINE/UNRESV to set and unset bans on other servers,
23 and the server argument on REHASH.
24 This is only allowed if the oper may perform the action locally,
25 and if the remote server has a shared{} block.
28 If a cluster{} block is present, bans are sent remotely even
29 if the oper does not have remoteban privilege.
33 <title>local_kill (C), kill local users</title>
35 This grants permission to use KILL on users on the same server,
36 disconnecting them from the network.
40 <title>die (D), die and restart</title>
42 This grants permission to use DIE and RESTART, shutting down
43 or restarting the server.
47 <title>gline (G), gline</title>
49 This allows using GLINE (network wide temp bans if 3 opers agree).
50 If unkline privilege is also possessed, allow UNGLINE (remove gline
55 <title>rehash (H), rehash</title>
57 Allows using the REHASH command, to rehash various configuration
58 files or clear certain lists.
62 <title>kline (K), kline and dline</title>
64 Allows using KLINE and DLINE, to ban users by user@host mask
69 <title>operwall (L), send/receive operwall</title>
71 Allows using the OPERWALL command and umode +z to send and
76 <title>mass_notice (M), global notices and wallops</title>
78 Allows using server name ($$mask) and hostname ($#mask) masks in
79 NOTICE and PRIVMSG to send a message to all matching users, and
80 allows using the WALLOPS command to send a message to all users
85 <title>nick_changes (N), see nick changes</title>
87 Allows using snomask +n to see local client nick changes.
88 This is designed for monitor bots.
92 <title>global_kill (O), global kill</title>
94 Allows using KILL on users on any server.
98 <title>hidden_oper (P), hide from /stats p</title>
100 This privilege currently does nothing, but was designed
101 to hide bots from /stats p so users will not message them
106 <title>resv (Q), channel control</title>
108 This allows using /resv, /unresv and changing the channel
113 <title>remote (R), remote routing</title>
115 This allows using the third argument of the CONNECT command, to
116 instruct another server to connect somewhere, and using SQUIT
117 with an argument that is not locally connected.
118 (In both cases all opers with +w set will be notified.)
122 <title>oper_spy (S), use operspy</title>
124 This allows using /mode !#channel, /whois !nick, /who !#channel,
125 /chantrace !#channel, /who !mask, /masktrace !user@host :gecos
126 and /scan umodes +modes-modes global list to see through secret
127 channels, invisible users, etc.
130 All operspy usage is broadcasted to opers with snomask +Z set
131 (on the entire network) and optionally logged.
132 If you grant this to anyone, it is a good idea to establish
133 concrete policies describing what it is to be used for, and
137 If operspy_dont_care_user_info is enabled, /who mask is operspy
138 also, and /who !mask, /who mask, /masktrace !user@host :gecos
139 and /scan umodes +modes-modes global list do not generate +Z notices
144 <title>unkline (U), unkline</title>
146 Allows using UNKLINE and UNDLINE, and if gline privilege is also
151 <title>xline (X), xline and unxline</title>
153 Allows using XLINE and UNXLINE, to ban/unban users by realname.
157 <title>hidden_admin, hidden administrator</title>
159 This grants everything granted to the admin privilege,
160 except the ability to set umode +a. If both admin and hidden_admin
161 are possessed, umode +a can still not be used.
164 This privilege does not appear in /stats o or oper up notices.
169 <!-- Keep this comment at the end of the file
174 sgml-namecase-general:t
175 sgml-general-insert-case:lower
176 sgml-minimize-attributes:nil
177 sgml-always-quote-attributes:t
180 sgml-parent-document: ("charybdis-oper-guide.sgml" "book")
181 sgml-exposed-tags:nil
183 sgml-validate-command: "nsgmls -e -g -s -u charybdis-oper-guide.sgml"