First of all I will start with ''rw globaldocs''. I figured we need a global folder where all documents and important messages can go. So Myself and Angel went on some PWs to see if they would create this folder, as its not global. Everyone said okay. So if your a playerworld manager who would like the create this folder, Open, UC or Paid, let us know if you add the folder then I can update my list and upload documents.
Second thing is about guest RCs. This is in the folder for the about 10 who have created it so far. The PWA need access to upload things, and a few off the GST may wish for it. If you don’t have the folder, or would like to read it, here is the message:
Recently a playerworld has been under an attack from a none-staff RC. Many playerworlds have these RCs and call them ‘VIP’ / ‘Guest’ RCs. The attack happened on a playerworld who had just let someone the knew on, who was in no way developing the playerworld. He had high rights, and took all the rights from all the staff, including the manager.
Because of this attack, and my personal disapproval of Guest RCs, I went on every playerworld and decided to see how many RCs were none-staff and guests. The numbers was higher than I hoped, and the security for them, even worse.
Heres what I would like to happen, you do not have to follow these suggestions, however I suggest you do so:
*Guest RCs should never have higher than level two RC by them selves. If they need more rights, they can ask the manager, and they should be removed afterwards.
*All Guest RCs should be IPed. Regardless of what level rights they have (0,1,2,3,4) its still an RC, and should be looked upon as a security risk regardless of what rights and access it has. IP ranges should be tight, by which I mean, #.#.#.* if possible.
*If you must have guest RCs at all, please make sure that person is trusted, and not a possible security risk, or someone who could cause problems.
*If that person is only helping for one time, or hasn’t helped in along time, remove the rights and RC from the serveroptions. That person could do something in the future which may damage the playerworld.
Currently there are a lot of guest RCs. There are many more, as some playerworlds do not currently use the ‘’(Position),staff,staff’’ format in their ‘staff=’ serveroption. So far I have found out that there are: Only on about 10 PWs which have a (guest) section.
Over 30 Guest RCs
Two of which are Level Four
Eight are level Three
Seven are level Two
And the rest are below level Two
Due to the high amount of guest RCs. I did request that they are lowered to level 2 and below, but when I started this investigation, there were too many high levelled guest RCs.
Please think before you add a guest RC. They don’t need to keep rights; they can be given them, and then removed afterwards.
I hope you are able to keep your playerworld secure, with no problems.
Thankyou
--Spark911 (PWA) |