Access Requirements

Access Requirement Strings (ARS) are used to specify the requirements of a specific Synchronet user account in order to have access to specific areas or functions of a Synchronet BBS.

You will find in SCFG and other Synchronet configuration files, places where the sysop may specify requirements to access a specific area or feature of the BBS. Usually these items will have ARS (Access Requirement String) or just “Requirements” as part of the name.

Most Access Requirements are “default allow”, meaning, if there are no requirements specified (i.e. the requirement string is blank), then the default behavior is allow access to that specific area/function to any user.

Some Requirement strings are “default deny”, meaning, if there are no requirements specified (i.e. the requirement string is blank), then no user will match that requirement. Examples of “default deny” requirements:

• Operator Requirements
• Exemption Requirements
• Moderated Posting User
• Pre-pack QWK Requirements

SCFG has an interactive Requirements dialog screen which allows easy addition or clearing of the most common requirement parameters.

╔══════════════════════════════════════════════════════════╗
║                  Main Group Requirements                 ║
╠══════════════════════════════════════════════════════════╣
║ │Requirement String ()                                   ║
║ │Clear Requirements                                      ║
║ │Set Required Level                                      ║
║ │Set Required Flag                                       ║
║ │Set Required Age                                        ║
║ │Set Required Sex                                        ║
║ │Set Required Connect Rate                               ║
║ │Set Required Post/Call Ratio (percentage)               ║
║ │Set Required Number of Credits                          ║
║ │Set Required Upload/Download Byte Ratio (percentage)    ║
║ │Set Required Upload/Download File Ratio (percentage)    ║
║ │Set Required Time of Day                                ║
║ │Set Required Day of Week                                ║
║ │Set Required Node Number                                ║
║ │Set Required User Number                                ║
║ │Set Required Time Remaining                             ║
║ │Set Required Days Till Expiration                       ║
╚══════════════════════════════════════════════════════════╝

From this dialog screen, you can edit the Requirement String directly, or use the additional menu options to add the most common requirement parameters (and values) or clear the requirement string.

Access Requirement Strings can consist entirely of English keywords and numbers or use short-hand symbols to fit a large number of security requirements into the limited space allowed for access requirement strings. Short-hand symbols and key words may be used interchangeably and combined in the same string. For clarity, it is suggested you use the keywords whenever possible. The string syntax is as follows:

usage: [not] [param] [not] [equal] <value> [or] [and] [...]

where: not      is the word "NOT" or the symbol '!' to specify reverse logic
       param    is one of any keywords (or short-hand symbols) that specifies
                a specific required parameter (default is LEVEL)
       equal    is the word "EQUAL", "EQUALS", the words "EQUAL TO", or the
                symbol '=' to specify exact equality required
       value    the required value (for either minimum requirement or equality)
       or       the word "OR" or the symbol '|' used to specify that ANY of two
                or more parameter values MAY be met to match the requirement
       and      the word "AND" or the symbol '&' may be used for clarity in
                reading when specifying that two or more parameter values MUST
                be met to match the requirement

Logic operators may exist between one or more Boolean or Value Parameters. When no logic operator is specified, the default logic requirement is GREATER_OR_EQUAL and when multiple parameters are specified, AND (i.e. all the specified parameters must be evaluated to a TRUE condition).

Boolean parameters are evaluated as true or false without any specified value for comparison.

Value parameters require a value (e.g. word or number) following the parameter keyword or symbol. This parameter is compared against the criteria of the system or the user using the current comparison logic.

- need to import from http://synchro.net/docs/security.html

• Configuration
• Access Control