Es_extended Everyone can use admin commands

FiveM Server Development ES/ESX
1

Hey.

My problem is that Everyone can use admin commands. That is, if there is a group user, then all commands are in use.

According to the database, there also seems to be a user group.
And no matter how I use setgroup admin / superadmin it goes through but does not update the database as opposed to I left the server.

Currently the es_extended version is: legacy
but same problem with es_extended v1-final (1.2.0) version
My server.cfg settings:

Extended Settings

add_principal group.admin group.user
add_ace group.admin command allow # allow all commands
add_ace group.admin command.quit deny # but don’t allow quit
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.add_principal allow
add_ace resource.es_extended command.remove_principal allow
add_ace resource.es_extended command.stop allow

– Start

start mapmanager
start chat
start chat_twitter
start spawnmanager
start sessionmanager
start fivem
start mysql-async
start async
start cron
start es_extended
start esx_menu_default
start esx_menu_dialog
start esx_menu_list
start esx_identity
start esx_skin
start baseevents
start load
start np-sounds
##start runcode

– ESX Basic

start instance
start skinchanger
##start esx_multicharacter # es_extended requires Config.Multichar = true
start esx_addonaccount
start esx_addoninventory
start esx_datastore
start esx_society
start esx_service
start esx_billing
start esx_scoreboard
start esx_basicneeds
start esx_license
start hud

#WHITELIST
start DiscordWhitelist

#PUHELIN
start esx_addons_gcphone
start gcphone

Someone else has the same problem:

2

This line of coding is allowing every user to have admin access

add_principal group.admin group.user

What you are essentially saying is everyone in the user group has access to the admin group commands. This is your issue.

3

Yes, I have tested here as well:
add_principal group.admin group.user
add_ace group.admin command allow # allow all commands
add_ace group.admin command.quit deny # but don’t allow quit
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.add_principal allow
add_ace resource.es_extended command.remove_principal allow
add_ace resource.es_extended command.stop allow

  • but still the user group can use admin commands.

but i can try one more time.
Should I delete this cosing line: add_principal group.admin group.user

?

1 Like
4

Yes delete that line. Also remember because you are changing permissions to restart your server after you make the changes.

2 Likes
5

to my recollection I have tried, without that line

and the same problem that the user can use admin commands

6

Now removed from server.cfg:
add_principal group.admin group.user

But did not change anything. You can still use admin rights as a user group. Setjob etc …

My server.cfg now:
Extended Settings:

add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.add_principal allow
add_ace resource.es_extended command.remove_principal allow
add_ace resource.es_extended command.stop allow

be the problem now?:
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.add_principal allow

7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.