I just tested it, but unfortunately the client-resource still has no permissions to execute the crosshair-commands.

Client-Console

Server-Console: (You can see the executed command above the security error message, but I have already assigned the command rights in the server.cfg for the crosshair-resource)

Server-Cfg

## CROSSHAIR RESOURCE PERMS ##
add_ace resource.ws_crosshair command.add_principal allow
add_ace resource.ws_crosshair command.remove_principal allow
add_ace resource.ws_crosshair command.add_ace allow

add_ace resource.ws_crosshair command.cl_customcrosshair allow
add_ace resource.ws_crosshair command.cl_crosshairdot allow
add_ace resource.ws_crosshair command.cl_crosshairsize allow
add_ace resource.ws_crosshair command.cl_crosshairstyle allow
add_ace resource.ws_crosshair command.cl_crosshairthickness allow
add_ace resource.ws_crosshair command.cl_crosshairgap allow
add_ace resource.ws_crosshair command.cl_crosshair_drawoutline allow
add_ace resource.ws_crosshair command.cl_crosshair_outlinethickness allow
add_ace resource.ws_crosshair command.cl_crosshaircolor_r allow
add_ace resource.ws_crosshair command.cl_crosshaircolor_g allow
add_ace resource.ws_crosshair command.cl_crosshaircolor_b allow
add_ace resource.ws_crosshair command.cl_crosshaircolor_a allow
add_ace resource.ws_crosshair command.cl_crosshair_dynamic_splitdist allow
add_ace resource.ws_crosshair command.cl_crosshair_dynamic_splitalpha_innermod allow
add_ace resource.ws_crosshair command.cl_crosshair_dynamic_maxdist_splitratio allow