<!-- MHonArc v2.4.4 -->
<!--X-Subject: Re: [MUD-Dev] Re: Player coding and security -->
<!--X-From-R13: ptNnzv-pt.UenlEntr.Sqzbagba.OP.QO (Quevf Uenl) -->
<!--X-Date: from fabius.globecomm.net [207.51.48.6] by in3.ibm.net id 864283467.19016-2 Thu May 22 06:44:27 1997 CUT -->
<!--X-Message-Id: 9705220302.81dk@ami-cg.GraySage.Edmonton.AB.CA -->
<!--X-Content-Type: text/plain -->
<!--X-Head-End-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>
<head>
<title>MUD-Dev message, Re: [MUD-Dev] Re: Player coding and security</title>
<!-- meta name="robots" content="noindex,nofollow" -->
<link rev="made" href="mailto:cg#ami-cg,GraySage.Edmonton.AB.CA">
</head>
<body background="/backgrounds/paperback.gif" bgcolor="#ffffff"
text="#000000" link="#0000FF" alink="#FF0000" vlink="#006000">
<font size="+4" color="#804040">
<strong><em>MUD-Dev<br>mailing list archive</em></strong>
</font>
<br>
[ <a href="../">Other Periods</a>
| <a href="../../">Other mailing lists</a>
| <a href="/search.php3">Search</a>
]
<br clear=all><hr>
<!--X-Body-Begin-->
<!--X-User-Header-->
<!--X-User-Header-End-->
<!--X-TopPNI-->
Date:
[ <a href="msg00665.html">Previous</a>
| <a href="msg00693.html">Next</a>
]
Thread:
[ <a href="msg01255.html">Previous</a>
| <a href="msg00676.html">Next</a>
]
Index:
[ <A HREF="author.html#00666">Author</A>
| <A HREF="#00666">Date</A>
| <A HREF="thread.html#00666">Thread</A>
]
<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
<H1>Re: [MUD-Dev] Re: Player coding and security</H1>
<HR>
<!--X-Subject-Header-End-->
<!--X-Head-of-Message-->
<UL>
<LI><em>To</em>: <A HREF="mailto:mud-dev#null,net">mud-dev#null,net</A></LI>
<LI><em>Subject</em>: Re: [MUD-Dev] Re: Player coding and security</LI>
<LI><em>From</em>: <A HREF="mailto:cg#ami-cg,GraySage.Edmonton.AB.CA">cg#ami-cg,GraySage.Edmonton.AB.CA</A> (Chris Gray)</LI>
<LI><em>Date</em>: Wed, 21 May 97 20:02:42 MST</LI>
</UL>
<!--X-Head-of-Message-End-->
<!--X-Head-Body-Sep-Begin-->
<HR>
<!--X-Head-Body-Sep-End-->
<!--X-Body-of-Message-->
<PRE>
[Shawn H:]
:There were a few posts a couple weeks back, most substantively from
:Chris Lawrence (I think), where inheritance was explored as a security
:model. I've no definite security model in mind yet, but I'll certainly
:need one. How many of us are looking to have some form of
:user-programming anyway? And to what degree are things
:user-programmable, for that matter?
Well, as is clear from my posts about MUD languages, I have full online
programming available. I have 3 "classes" of players: normal, apprentice
and wizard. Normal players can only use the stuff provided in the scenario,
so they are limited to the "programming" that the on-line building
code gives to them. Apprentices and wizards can go into the full
programming mode (all input is then statements/expressions in the
programming language), rather than going to the active command interpreter.
There are a few builtins that are restricted to full wizards. Also, the
owner of a 'thing' can set its permissions so that wizards can change
it but apprentices cannot. Also, output from non-wizards is prefixed
(on each line that contains any non-wizard text) by an '@', to let
users beware. Players can turn that feature off for themselves.
I've gone through a couple of models for security, after some short
discussions with Marcus Ranum several years ago (there was a discussion
on it in the newsgroups, and he was talking about the security in Uber).
Now, it is mostly security by invisibility. If you do not have a symbol
for a property available in an "in-use" symbol table, then you will
not see that property in a dump of a 'thing'. SysAdmin is exempt from
this limitation, of course. So, a wizard can make a fully private
property by simply never exporting its name. Without some sort of
reference to the property, which you cannot get from a 'thing' which
has the property, you cannot modify or retrieve the value of that
property on any 'thing's, even if you own the 'thing'.
It's by no means ideal, but it mostly works. I do run into problems
with it every now and then, but so far I've been able to work around them.
--
Chris Gray cg#ami-cg,GraySage.Edmonton.AB.CA
</PRE>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<HR>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<UL>
<LI>Prev by Date:
<STRONG><A HREF="msg00665.html">Re: [MUD-Dev] RP thesis...</A></STRONG>
</LI>
<LI>Next by Date:
<STRONG><A HREF="msg00693.html">Re: [MUD-Dev] Virtual rooms (was: RP thesis...)</A></STRONG>
</LI>
<LI>Prev by thread:
<STRONG><A HREF="msg01255.html">Re: [MUD-Dev] Alright... IF your gonan do DESIESE...</A></STRONG>
</LI>
<LI>Next by thread:
<STRONG><A HREF="msg00676.html">Invite/Introduction....</A></STRONG>
</LI>
<LI>Index(es):
<UL>
<LI><A HREF="index.html#00666"><STRONG>Date</STRONG></A></LI>
<LI><A HREF="thread.html#00666"><STRONG>Thread</STRONG></A></LI>
</UL>
</LI>
</UL>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
<ul><li>Thread context:
<BLOCKQUOTE><UL>
<LI><STRONG>Re: [MUD-Dev] Alright... IF your gonan do DESIESE...</STRONG>, <EM>(continued)</EM>
<ul compact>
<ul compact>
<LI><strong><A NAME="01027" HREF="msg01027.html">Re: [MUD-Dev] Alright... IF your gonan do DESIESE...</A></strong>,
Matt Chatterley <a href="mailto:root#mpc,dyn.ml.org">root#mpc,dyn.ml.org</a>, Sat 03 Jan 1970, 07:21 GMT
</LI>
</ul>
<LI><strong><A NAME="01124" HREF="msg01124.html">Re: [MUD-Dev] Alright... IF your gonan do DESIESE...</A></strong>,
Jeff Kesselman <a href="mailto:jeffk#tenetwork,com">jeffk#tenetwork,com</a>, Wed 04 Jun 1997, 09:44 GMT
<UL>
<LI><strong><A NAME="01251" HREF="msg01251.html">Re: [MUD-Dev] Alright... IF your gonan do DESIESE...</A></strong>,
Raz <a href="mailto:muddyraz#mushroom,demon.co.uk">muddyraz#mushroom,demon.co.uk</a>, Fri 09 Jan 1970, 08:01 GMT
</LI>
</UL>
</LI>
<LI><strong><A NAME="01255" HREF="msg01255.html">Re: [MUD-Dev] Alright... IF your gonan do DESIESE...</A></strong>,
Jeff Kesselman <a href="mailto:jeffk#tenetwork,com">jeffk#tenetwork,com</a>, Sun 08 Jun 1997, 11:55 GMT
</LI>
</ul>
</LI>
<LI><strong><A NAME="00666" HREF="msg00666.html">Re: [MUD-Dev] Re: Player coding and security</A></strong>,
Chris Gray <a href="mailto:cg#ami-cg,GraySage.Edmonton.AB.CA">cg#ami-cg,GraySage.Edmonton.AB.CA</a>, Thu 22 May 1997, 13:44 GMT
<LI><strong><A NAME="00676" HREF="msg00676.html">Invite/Introduction....</A></strong>,
Jeff Kesselman <a href="mailto:jeffk#tenetwork,com">jeffk#tenetwork,com</a>, Thu 22 May 1997, 01:23 GMT
<UL>
<LI><strong><A NAME="00702" HREF="msg00702.html">Re: [MUD-Dev] Invite/Introduction....</A></strong>,
clawrenc <a href="mailto:clawrenc#cup,hp.com">clawrenc#cup,hp.com</a>, Fri 23 May 1997, 10:15 GMT
</LI>
</UL>
</LI>
<LI><strong><A NAME="00677" HREF="msg00677.html">Alright... IF your gonan do DESIESE...</A></strong>,
Jeff Kesselman <a href="mailto:jeffk#tenetwork,com">jeffk#tenetwork,com</a>, Thu 22 May 1997, 01:22 GMT
<UL>
<LI><strong><A NAME="00696" HREF="msg00696.html">Re: [MUD-Dev] Alright... IF your gonan do DESIESE...</A></strong>,
Miroslav Silovic <a href="mailto:silovic#srce,hr">silovic#srce,hr</a>, Fri 23 May 1997, 03:36 GMT
</LI>
</UL>
</LI>
</UL></BLOCKQUOTE>
</ul>
<hr>
<center>
[ <a href="../">Other Periods</a>
| <a href="../../">Other mailing lists</a>
| <a href="/search.php3">Search</a>
]
</center>
<hr>
</body>
</html>