Document operator privilege settings.

git-svn-id: file:///home/klmitch/undernet-ircu/undernet-ircu-svn/ircu2/trunk@1068 c9e4aea6-c8fd-4c43-8297-357d70d61c8c

diff --git a/ChangeLog b/ChangeLog
index 5a48eb779691de015ee9e3cfea54b29517c86d71..6086aed9e9f825c215d8dda9e7d28057b0d7b739 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,8 @@
-2004-05-16  Michael Poole <mdpoole@troius.org>
+2004-05-16  Michael Poole <mdpoole@troilus.org>
+
+       * doc/example.conf: Document operator privilege settings.
+
+2004-05-16  Michael Poole <mdpoole@troilus.org>
 
        Get rid of CONF_LOCOP; use PRIV_PROPAGATE instead.
 

diff --git a/doc/example.conf b/doc/example.conf
index 0c6e6ae592956b32ae506d82ac9cde6b60621461..39c3f1dce3733c1d7d91c2f6d4ade7c2993168e7 100644 (file)
--- a/doc/example.conf
+++ b/doc/example.conf
@@ -565,18 +565,58 @@ CRULE
 # can squit, connect and kill - but only locally: their +o user mode
 # is not not passed along to other servers. On Undernet, this prevents
 # them from using Uworld as well.
-# Depending on some defines in include/config.h, local operators are also
-# not allowed to /DIE and /RESTART the server.
+#
 # Operator {
-#  local = no;
+#  local = yes;
 #  host = "host/IP mask";
 #  name = "opername";
 #  password = "encryptedpass";
 #  class = "classname";
+#
+#  # You can also specify per-operator privileges, many of which can
+#  # be globally disabled by settings in the "features" block (as
+#  # indicated).
+#  extended_who_information = yes;
+#  oper_status_display = yes;
+#  globally_opered = no;              # inverted alias for local
+#  bypass_local_channel_limits = yes; # unless OPER_NO_CHAN_LIMIT = FALSE
+#  set_local_channel_modes = yes;     # unless OPER_MODE_LCHAN = FALSE
+#  protected_local_channel = yes;     # unless NO_OPER_DEOP_LCHAN = FALSE
+#  bypass_join_local_channels = yes;  # unless OPER_WALK_THROUGH_LMODES = FALSE
+#  see_invisible_users = yes;         # unless SHOW_INVISIBLE_USERS = FALSE
+#  list_all_invisible_users = yes;    # unless SHOW_ALL_INVISIBLE_USERS = FALSE
+#  unlimited_who_queries = yes;       # unless UNLIMIT_OPER_QUERY = FALSE
+#
+#  # The following privileges have two settings in the "features" block;
+#  # one to globally disable for local operators, one to globally disable
+#  # the privilege for global operators.
+#  local_kill = yes;                  # unless {OPER,LOCOP}_KILL = FALSE
+#  rehash = yes;                      # unless {OPER,LOCOP}_REHASH = FALSE
+#  die = yes;                         # unless {OPER,LOCOP}_DIE = FALSE
+#  local_gline = yes;                 # unless {OPER,LOCOP}_LGLINE = FALSE
+#  local_jupe_server = yes;           # unless {OPER,LOCOP}_LJUPE = FALSE
+#  change_settings = yes;             # unless {OPER,LOCOP}_SET = FALSE
+#  local_gline_channels = yes;        # unless {OPER,LOCOP}_LBADCHAN = FALSE
+#  see_private_channels = yes;        # unless {OPER,LOCOP}_SEE_IN_SECRET_CHANNELS = FALSE
+#  wide_glines = yes;                 # unless {OPER,LOCOP}_WIDE_GLINE = FALSE
+#
+#  # The following privileges default to yes for global operators and
+#  # to no for local operators.
+#  see_other_opers = yes;             # unless local
+#  global_kill = yes;                 # unless local or LOCAL_KILL_ONLY = TRUE
+#  gline = yes;                       # unless local or OPER_GLINE = FALSE
+#  jupe_server = yes;                 # unless local or OPER_JUPE = FALSE
+#  hack_channel_modes = yes;          # unless local or OPER_OPMODE = FALSE
+#  gline_channels = yes;              # unless local or OPER_BADCHAN = FALSE
 # };
 #
-# The encrypted password is optional.  If you wish to encrypt your password,
-# there is a utility in the ircd.  Please read the file tools/README.  
+# The encrypted password is optional.  If you wish to encrypt your
+# password, there is a utility in the ircd.  Please read the file
+# tools/README.
+# All privileges are shown with their default values; if you wish to
+# override defaults, you should set only those privileges for the
+# operator.  Listing defaulted privileges just makes things harder to
+# find.
 Operator {
  local = no;
  host = "*@*.cs.vu.nl";