Hello,

First of all, I apologize for my bad English.

Her is my request :
I plan to use the Roster 2.0 for a lots of guilds on the server where I'm playing. The problem is that bags content, banks content, golds, can be see by other peoples than the owner.
Bag and banks can be partially consult with the search module, and all of it can be access by administrator (my staff and I).

How could I make all of this completely private, event for my staff and I ?
There is no reason for us to be able to consult any of this informations, nether in our guild, and of course not for other guild's members.

I've found answers for the 1.7.3, but not for the 2.0.. hope it exists...

Here is my website :
http://www.renaissance-lce.net/roster/index.php

Thanks in advance for any help.

Maerlÿn

You can't, because roster does not allow per-user authentication. You could modify it to not fetch per-character information at all.

PleegWat wrote:You can't, because roster does not allow per-user authentication. You could modify it to not fetch per-character information at all.

That would be perfect... but it is already done and it doesn't protect enough.

The per-character functions does give the choice to restricted groups to access or not data's. But there is no options "nobody", in the best case, Admin can still access those informations, and I don't want to.
I want that no-one could access these informations, even me.

Beside, for the result of the search module, the per-character doesn't protect anything. It does search in job and objects...

I would like 2 things :
- make the search tool only searching in "jobs", not "items"
- have another option in the "per-character' that would be : "nobody" (if possible )

Thanks anyway for your try PleegWat, and hope my wishes are possible

I think the accounts addon supports this ability and is currently being worked on by mdeshane
I'm not sure if it's alpha or beta, but you can find it in the addon forum as well as the roster_addons SVN

As for search, auth was not coded into it mainly because we wanted to get it working. I think we will tie auth into the search system for version 2.1

If you remove the file lib/search/item.php, search will not include items anymore
Also, for any addons that use search, remove the search.inc.php from the inc folder for the addon to disable search for that addon

If you want to just modify these files for auth, you can look at the docs for for a good idea on how to do this
Roster AddOn SDK - http://www.wowroster.net/MediaWiki/AddonSDK
Auth section - http://www.wowroster.net/MediaWiki/Addo ... horization

As for modifying Roster to help with setting a nobody setting
Look at lib/login.php, and addons/info/inc/char.lib.php
function rosterAccess() in login.php sets the selectable levels, you can probably add -1 as nobody

Then char.lib.php controls the display for these settings

I hope you can find what you need there

It is a common convention for the admin/root user to be able to do anything, without any restrictions.

Why yes, yes it is