8 Meanings of oper privileges
9 ===========================
11 These are specified in privset{}.
13 oper:admin, server administrator
14 --------------------------------
16 Various privileges intended for server administrators. Among other
17 things, this automatically sets umode +a and allows loading modules.
19 oper:die, die and restart
20 -------------------------
22 This grants permission to use DIE and RESTART, shutting down or
23 restarting the server.
25 oper:global\_kill, global kill
26 ------------------------------
28 Allows using KILL on users on any server.
30 oper:hidden, hide from /stats p
31 -------------------------------
33 This privilege currently does nothing, but was designed to hide bots
34 from /stats p so users will not message them for help.
36 oper:hidden\_admin, hidden administrator
37 ----------------------------------------
39 This grants everything granted to the oper:admin privilege, except the
40 ability to set umode +a. If both oper:admin and oper:hidden\_admin are
41 possessed, umode +a can still not be used.
43 oper:kline, kline and dline
44 ---------------------------
46 Allows using KLINE and DLINE, to ban users by user@host mask or IP
49 oper:local\_kill, kill local users
50 ----------------------------------
52 This grants permission to use KILL on users on the same server,
53 disconnecting them from the network.
55 oper:mass\_notice, global notices and wallops
56 ---------------------------------------------
58 Allows using server name ($$mask) and hostname ($#mask) masks in NOTICE
59 and PRIVMSG to send a message to all matching users, and allows using
60 the WALLOPS command to send a message to all users with umode +w set.
62 oper:operwall, send/receive operwall
63 ------------------------------------
65 Allows using the OPERWALL command and umode +z to send and receive
71 Allows using the REHASH command, to rehash various configuration files
72 or clear certain lists.
74 oper:remoteban, set remote bans
75 -------------------------------
77 This grants the ability to use the ON argument on DLINE/KLINE/XLINE/RESV
78 and UNDLINE/UNKLINE/UNXLINE/UNRESV to set and unset bans on other
79 servers, and the server argument on REHASH. This is only allowed if the
80 oper may perform the action locally, and if the remote server has a
85 If a cluster{} block is present, bans are sent remotely even if the
86 oper does not have oper:remoteban privilege.
88 oper:resv, channel control
89 --------------------------
91 This allows using /resv, /unresv and changing the channel modes +L and
94 oper:routing, remote routing
95 ----------------------------
97 This allows using the third argument of the CONNECT command, to instruct
98 another server to connect somewhere, and using SQUIT with an argument
99 that is not locally connected. (In both cases all opers with +w set will
102 oper:spy, use operspy
103 ---------------------
105 This allows using /mode !#channel, /whois !nick, /who !#channel,
106 /chantrace !#channel, /topic !#channel, /who !mask, /masktrace
107 !user@host :gecos and /scan umodes +modes-modes global list to see
108 through secret channels, invisible users, etc.
110 All operspy usage is broadcasted to opers with snomask +Z set (on the
111 entire network) and optionally logged. If you grant this to anyone, it
112 is a good idea to establish concrete policies describing what it is to
113 be used for, and what not.
115 If operspy\_dont\_care\_user\_info is enabled, /who mask is operspy
116 also, and /who !mask, /who mask, /masktrace !user@host :gecos and /scan
117 umodes +modes-modes global list do not generate +Z notices or logs.
119 oper:unkline, unkline and undline
120 ---------------------------------
122 Allows using UNKLINE and UNDLINE.
124 oper:xline, xline and unxline
125 -----------------------------
127 Allows using XLINE and UNXLINE, to ban/unban users by realname.
129 snomask:nick\_changes, see nick changes
130 ---------------------------------------
132 Allows using snomask +n to see local client nick changes. This is
133 designed for monitor bots.