Server Option: noscripts (or classesonly?)

[Rick]

The idea is that, when enabled on a server, a level NPC (or putnpc[2] NPC), the only operations allowed are assignment to this. variables, calling exposed functions (maybe with a keyword?), and joining classes.

GS1:

NPC Code:

---

if (created) {

  this.somevar = 1;

  function();

}



join("class");

---

GS2:

NPC Code:

---

function onCreated() {

  join("class");

  this.somevar := 1;

  functon();

}

---

This would increase security immeasurably as level administration, etc, can have access to levels but not access to the scripts themselves, they can only control the configuration of those NPCs. This of course would not affect clientside scripts, weapons, or DB NPCs.

Any comments?

[Skyld]

It's certainly an interesting idea. However, it may be better to select level prefixes to apply this to instead of all levels.

[Velox Cruentus]

PHP Code:

function(1); 


Persay?

PHP Code:

function onCreated()
{
  join("Items");
  Config_Item(1,"x","y");
} 


= More secure? Maybe?

[Admins]

For Unholy nation there was the idea of making it possible to define new file types (like secure1) via the server options, where you define what should be allowed in those levels:

filerights_secure1=look,join

In the folder config you would write something like that:

secure1 *.nw

Then all local npcs in levels belonging to that file type would only be able to change the basic look of the npc, and to join classes. It would probably be more interesting to be able to allow/deny more stuff, like using more functions or allowing only special functions, or only allow to join special classes, but for the start it could at least do something against those scripts that use putnpc2 to spawn staff npcs.

At the end this could also be used to define rights for weapons or database npcs. Then we have rights for staff, and rights for the scripts

[Rick]

Yeah, I hate this problem where people with level access can basically bypass the rights that they have (emulate set attributes through scripts).

[Robin]

yeah but people with NC access can bypass set attributes rights, warping rights, reseting rights, etc.

[Rick]

Originally Posted by Robin

yeah but people with NC access can bypass set attributes rights, warping rights, reseting rights, etc.

Of course, but scripters are usually ones you can trust, in general.

[vahn32]

Originally Posted by Rick

Of course, but scripters are usually ones you can trust, in general.

sans Gman*

[zell12]

Yes, a scripter is more trustworthy than a level/gfx maker... Sure...

[Evil_Trunks]

Originally Posted by zell12

Yes, a scripter is more trustworthy than a level/gfx maker... Sure...

In general, I would say yes. Scripting usually attracts a greater deal of intelligence/common sense than level making. These types of people are more trustworthy.

Of course there will be some exceptions...

[Kaimetsu]

Originally Posted by zell12

Yes, a scripter is more trustworthy than a level/gfx maker... Sure...

It's not really an issue, is it? The purpose of Rick's suggestion is to ensure that people don't have any more rights than they need. This is a worthwhile goal regardless of how we judge the relative trustworthiness of the groups.

[Velox Cruentus]

Of course there will be some exceptions...

*cough*G-Man*cough*

[Admins]

I don't think that scripters are more intelligent, but there are usually more level makers than scripters, and server owners often don't care alot about giving access to levels because they think "it's just some levels"

[zell12]

Scripters need the math skills for scripting, as well as the scripting knowledge of the lanuage they want to script in. How does this make them more trustworthy?

Doesn't really matter anyway...

[Velox Cruentus]

Math Skills more or less == Logic Skills.
Knowlegde == Wisdom.

The fact that programmers require logic skill and wisdom would more or less orient the trust in that they can do logical and wise actions with the powers they are given. Although this is not the only circumstances towards trustworthiness, it does bring a good amount in itself.

Although... Most of that trust is ill-earned, and the trust is usually abused. Tralala...

[Fry]

Besides there aren't many "intelligent" scripters anymore so it doesn't work here.

On topic:
Well, what's there to say, great idea!

[Velox Cruentus]

Originally Posted by Fry

Besides there aren't many "intelligent" scripters anymore so it doesn't work here.

Nay -- There are a lot of intelligent scripters. They just are either lazy, corrupt, power-hungry, lack of interest (different but close to lazy), or taken/busy.

[Fry]

Originally Posted by Velox Cruentus

Nay -- There are a lot of intelligent scripters. They just are either lazy, corrupt, power-hungry, lack of interest (different but close to lazy), or taken/busy.

Yeah, that's what I meant, there are serveral, but they don't play Graal [anymore]. And if they are corrupt or power-hungry they aren't that intelligent.

[Velox Cruentus]

Corruption and Power-Hungery has NOTHING to do with intelligence. There are still some intellegent scripters out there... But why would they work for people they don't know, servers they don't support, people whom violate their morale guidelines, or a population/community they dislike.

Someone can be very intelligent, and corrupt...

[zell12]

No it isn't. Thats why I said it doesn't really matter in my second post. Also, as long as this doesn't affect levelmakers making scripts in levels (I mean like the normal ones, not some crazy stuff Kai does) then i'm all for it.