admin

Last updated on

Staff press F9 (or type /opx.admin) to open a menu that finds a player, goes to them, heals or moves them, gives them a car, a weapon or an item, kicks or bans them, and reads the audit. The same actions are rows on the target eye and chat commands. Every action is a restricted command, so the server's ACL decides who may run what. Nothing is stored in the database.

Granting access

The module checks no permission itself: the host resolves command.<name> against acl.jsonc before any handler runs. The menu and the eye only grey out or hide what the ACL would refuse.

• command.opx.admin opens the menu. Holding it is what makes someone "staff" for IsStaff and for the badge on name tags.
• command.opx.admin.* covers every action. Only a rule ending in .* is a prefix, so it does not cover the opener: an operator role needs both.
• Narrower families work too, e.g. command.opx.admin.player.*. The character.* commands are separate on purpose: list shows one account's characters, find searches everyone who ever played, rename/delete change rows that outlive a session.
• The menu and eye also run other modules' commands, named in LINKS: opx.players, opx.where, opx.job, opx.gang, opx.money, opx.save, opx.inventory.open, opx.inventory.holders, opx.weather.set, opx.weather.next, opx.weather.freeze, opx.time, opx.time.freeze. Grant those too (e.g. command.opx.weather.*, command.opx.time, command.opx.time.*).
• The eye hides what the menu greys. The menu draws a refused row and marks it; the eye does not register it at all, so a missing grant looks like a missing feature. The client writes the dropped grants to the server journal, e.g. [admin] target rows, player 3: … this ACL does not grant: opx.inventory.open opx.weather.set — each name is a command.<name> to add.
• A short alias is gated on the long command's right, never on its own name.
• LINKS.DOORLOCK adds Manage door locks to the World screen; it runs /opx.doorlock and needs command.opx.doorlock (doorlock).

Raw rights

Three ACL rights are not commands: command.* grants none of them, * grants all. Grant them explicitly.

"senior": ["command.opx.admin", "command.opx.admin.*", "opx.admin.immune", "opx.admin.override"]

What a grant does not imply

• Bag commands on weapon items need the weapon command too. inventory.give of a weapon needs weapon.give (of rounds: weapon.giveammo); inventory.remove needs weapon.remove (rounds: weapon.ammo); inventory.clear checks every weapon and round first and clears nothing if one is refused. Refusal: weapon_not_granted.
• player.observe is spectating, not flight. Without self.noclip, its noclip and hidden body end after PLACEMENT.OBSERVE_MS (2 min) and the operator is told.
• player.health 0 is a kill: it needs the kill command (kill_not_granted).

Commands

56 restricted commands (the opener + 55 actions). The right is always command. + the full name.

• target playerId|me: a server id, or me/self for the caller. holder playerId|me|citizenId: also a citizen id, online or offline.
• Switches take on/off (also true/false, 1/0, yes/no); left out, they toggle.
• "In game": the console gets in_game_only.
• Moving, reviving, healing, killing and spawning for a player need that player's readiness gate open (not_incarnated, gate_closed, gate_unreadable). A move is a kill + respawn at the new point, health set to PLACEMENT.HEALTH, with a grace window; if the respawn is refused, the player is revived where they stood.
• Per-operator cooldown per command: 400 ms for actions, 1000 ms for reads (RATE + tunables); too_fast inside it. The console has none.
• Every action writes an audit line; the target gets a toast unless they are the caller.
• One heavy request per operator. Every bag, weapon and character command, the key cut and every menu list run on that operator's single worker. A typed command arriving while it is busy answers busy; a menu list waits its turn (only the newest ask per list is kept). A worker silent for 30 s releases the slot.
• Every list on the menu (roster, bag, saved places, characters, ammo, catalogues) is paged, 20 rows a page. Redraws run on their own thread, so a search typed in a form comes back filtered.

Menu

Self

Player

Character

Moderation

Vehicle

vehicleId|near: a live vehicle id, or near = the vehicle the caller sits in, else the nearest in the caller's bucket within VEHICLES.NEAR_RADIUS. A typed id must carry the caller or be within VEHICLES.REACH in their instance, unless they hold opx.admin.vehicle.anywhere.

Inventory

Need the inventory contract (inventory_unavailable). Counts 1..INVENTORY.MAX_COUNT. On a weapon or ammo item they also need the matching weapon command (grant limits).

Weapon

Weapons are inventory items, so these need inventory too. A weapon is named by its item, with or without weapon_; ammunition by its own item.

World

Read

Configuration

config/admin.lua sets OPX.Config.MODULES.admin. Shared script — every client downloads it, keep no secret in it. Tunable keys are defaults of a live panel entry (ADMIN_*), read when used; the rest are read at start.

Spawn list: modules/admin/data/vehicles.lua (277 rows in classes, Air first). Ped list: modules/admin/data/peds.lua (250 ordinary human rigs). A malformed row is warned at boot and skipped.

Refusal codes

Locale key admin.error.<camelCase> (e.g. bad_target → admin.error.badTarget). Typed-input codes show as warnings, the rest as errors.