#
# /adm/etc/access
#
# determines group and user access to the filesystem
# this works similarly to the groups file
# 
# (directory or file)	(userlist)
# after each user or group in the userlist, you should have [] with r in it
# for read access, w in it for write access.  If either letter is preceeded
# by a '-', it implies negative access.
#
#(/adm/obj)          (admin)[rw]
#(/adm/obj/master.c) (admin)[r]
#
# the preceeding two lines give all members of group "admin", read and write
# access to everything in /adm/obj except for master.c to which they only
# have read access to.
#
# magic groups:
#	(all) - all users

# admins can write to everywhere, all can read everywhere
(/)             (admin)[rw]:(all)[r]

# devs
(/bin) (admin)[rw]:(dev)[rw]
(/std) (admin)[rw]:(dev)[rw]
(/obj) (admin)[rw]:(dev)[rw]
(/room) (admin)[rw]:(dev)[rw]
(/include) (admin)[rw]:(dev)[rw]

# nobody can do anything here
(/adm/tmp)       (all)[]
(/data/mail)     (all)[]

# nobody can write to /adm/log but root
(/adm/log)	(all)[r]

# allow everyone write access to /tmp
(/tmp)		(all)[rw]
(/ftp)          (all)[rw]

# everyone can read in /u, but only admins can write to other homedirs
(/u)            (all)[r]:(admin)[rw]

(/include)      (all)[r]:(include)[rw]
# maker access
# no access to /adm since messing that up can crash the mud and allow
# this file to be changed!
(/std)      (maker)[rw]

(/ud)       (ud)[rw]
(/obj)      (maker)[rw]
(/bin)      (maker)[rw]
(/d)        (maker)[rw]
(/room)     (maker)[rw]

# docs
(/help)     (doc)[rw]

# anyone
(/open)     (all)[rw]

(/ideas)    (maker)[rw]

# All the domains
(/d/base)	(all)[r]:(base)[rw]:(admin)[rw]
