Ace Permission

Ace permissions work standalone and do not depend on a framework. The server-side helpers wrap the native Ace natives (IsPlayerAceAllowed, IsPrincipalAceAllowed) and the add_ace / remove_ace / add_principal / remove_principal commands, with convenient normalization of principals and Ace strings.

server.cfg requirement

For MSK.AddAce, MSK.RemoveAce, MSK.AddPrincipal and MSK.RemovePrincipal to work, msk_core must be allowed to manage Aces. Add the following to your server.cfg:

add_ace resource.msk_core command.add_ace allow
add_ace resource.msk_core command.remove_ace allow
add_ace resource.msk_core command.add_principal allow
add_ace resource.msk_core command.remove_principal allow

Principal normalization

The principal / child arguments accept a flexible format. If the value does not already start with player., group. or identifier., it is normalized automatically:

• A number becomes player.<id>
• A string containing a : (e.g. steam:110000...) becomes identifier.<value>
• Any other string becomes group.<value>

AddPrincipal / RemovePrincipal additionally prefix the parent group with group. if missing, and AddAce / RemoveAce prefix the ace with command. if missing.

MSK.IsAceAllowed

Checks whether a player has Ace permission for a command. The command is automatically prefixed with command. if needed.

Parameters
playerId - number - The player's server id.
command - string - Command name to check (the command. prefix is added automatically).

Returns
hasAcePerm - boolean - Whether the player has Ace permission for the given command.

local hasAcePerm = MSK.IsAceAllowed(playerId, command)

-- Example
local hasAcePerm = MSK.IsAceAllowed(1, 'your_command')

-- As an Export:
local hasAcePerm = exports.msk_core:IsAceAllowed(playerId, command)

MSK.IsPrincipalAceAllowed

Checks whether a principal has a specific Ace permission. The principal is normalized (see above).

Parameters
principal - string or number - The principal (e.g. group.admin, 1, a license/steam identifier).
ace - string - The Ace permission to check.

Returns
isAllowed - boolean - Whether the principal has the given Ace permission.

local isAllowed = MSK.IsPrincipalAceAllowed(principal, ace)

-- Example
local isAllowed = MSK.IsPrincipalAceAllowed('group.admin', 'command.your_command')

-- As an Export:
local isAllowed = exports.msk_core:IsPrincipalAceAllowed(principal, ace)

MSK.AddAce

Grants an Ace permission to a principal. The principal is normalized and the ace is prefixed with command. if needed.

Parameters
principal - number or string - The principal to grant the permission to.
ace - string - The Ace permission to add.
allow - boolean - Pass false to add a deny rule instead of allow. Optional, default: true (allow).

MSK.AddAce(principal, ace, allow)

-- Example 1: Adds command permission for group admin
MSK.AddAce('admin', 'command.your_command')

-- Example 2: Adds command permission for playerId 1
MSK.AddAce(1, 'command.your_command')

-- As an Export:
exports.msk_core:AddAce(principal, ace, allow)

MSK.RemoveAce

Removes an Ace permission from a principal. The principal is normalized and the ace is prefixed with command. if needed.

Parameters
principal - number or string - The principal to remove the permission from.
ace - string - The Ace permission to remove.
allow - boolean - Pass false to remove a deny rule instead of allow. Optional, default: true (allow).

MSK.RemoveAce(principal, ace, allow)

-- Example 1: Removes command permission for group admin
MSK.RemoveAce('admin', 'command.your_command')

-- Example 2: Removes command permission for playerId 1
MSK.RemoveAce(1, 'command.your_command')

-- As an Export:
exports.msk_core:RemoveAce(principal, ace, allow)

MSK.AddPrincipal

Adds a child principal to a parent group (inheritance). A numeric child becomes player.<id>, and the parent group is prefixed with group. if missing.

Parameters
child - number or string - The child principal (e.g. a player id or identifier).
parent - string - The parent group (e.g. admin or group.admin).

MSK.AddPrincipal(child, parent)

-- Example: Make playerId 1 inherit the admin group
MSK.AddPrincipal(1, 'admin')

-- As an Export:
exports.msk_core:AddPrincipal(child, parent)

MSK.RemovePrincipal

Removes a child principal from a parent group. A numeric child becomes player.<id>, and the parent group is prefixed with group. if missing.

Parameters
child - number or string - The child principal.
parent - string - The parent group.

MSK.RemovePrincipal(child, parent)

-- Example: Remove playerId 1 from the admin group
MSK.RemovePrincipal(1, 'admin')

-- As an Export:
exports.msk_core:RemovePrincipal(child, parent)