How to restrict channel access (aka user join a specific channel)

[Alcazar]

-> http://forum.teamspeak.com/showthrea...cific-channel)

[Morthawt]

http://forum.teamspeak.com/showthrea...cific-channel)

I use method #2 there with some modifications. I have my server set up so that no admin or anyone else can go into secure rooms unless people who have been assigned the proper channel group for that room drag the people into that room. Even my admin's cannot just bust into a room using the #2 technique on that link. However you need to make sure that if you do want it completely secure even from admin's that all admin and other server groups have the following DISABLED (unchecked)

b_channel_join_ignore_password
b_channel_join_ignore_maxclients
b_client_skip_channelgroup_permissions

This way people simply cannot get in unless they have been assigned the channel group on that channel. I also set join power on the channel to 0 also, so even if someone some how had enough join power, the room its self will cancel it out and deny entrance without the channel group.

If you want to make sure admins or anyone else cannot get into the room, also make sure you disable them from being able to alter your permission system and disable them from being able to make tokens, because tokens could be created for a room channel group and get people in that way...

[Alex :))]

Yea, i used this method too, but also the 1st. I think that's the more useful st, if you follow "Channel rights", then look after i_channel_needed_join_power and write down their for example 80. So now you go to server groups and look at the group, you will to join i_channel_join_power . Write down their 80 too, so no other group can join in this channel, which has got join power under 80 ! (of course Admins can)

[Morthawt]

My method bypasses all this because server groups by default are overwritten by channel groups, which is why i gave those 3 permissions to uncheck for all server groups. This, coupled with setting "join power" to 0 on the secure rooms means that even if an admin gave themselves somehow maximum join power, the room would overrule it and they would effectively have 0 again Channel admin is the way to go because if you disable the ability for admins to alter permissions (including channel permissions) AND the ability to create tokens, then the only way for an admin or anyone else to assign the required channel group is to someone who is already in that channel, aka already authorized to be there.

[SilentStorm]

As long as Admins can still assign Groups they can get in No need for a Privilege Key...

[Morthawt]

lol... how? Channel groups can only be assigned to someone who is already in that channel if you can't make a token or see a list of members. Since there are no server groups with a higher enough join power to get in the room, the only way to get in is to be assigned the channel group that has the required join power. The only way you can do that is to right click someone and assign it, which is only useful if they are already in that room they want to get into. They cannot just assign it to themselves if you do your permissions right.

---merged---

My client has add and remove member of 75 so I can assign myself the main server admin group if and when I need to make these changes, otherwise I have the same level of admin as my top admin's which is limited from altering permissions, creating tokens, seeing channel group members etc. I create the private rooms using my main server admin and set up the permissions and create a token for the person so they will become channel admin of their own room. Then they can drag people into their room if they want too and then they have the power to assign a channel access chanel group which can let other people get in and out any time they want. Either way, the only possible method to "break in" is to have the channel group assigned IN that particular room, which without the prior methods can only be assigned to someone while they are actually in the room already. Since only the room's intended owner has access only they can get more people into their own room.

I wanted perfect privacy so nobody can get into rooms unauthorized. Even my main main server config server group I use to set things up has those 3 prior mentioned permissions removed so even I cannot accidentally just walk into anyones private rooms.

[Morthawt]

As long as Admins can still assign Groups they can get in No need for a Privilege Key...

Well after testing our server for a little while I think you agree that if you accomodate for the methods that are possible to bypass this protection then it is indeed secure, as your test showed.

The stipulations are that nobody other than the owner can see channel group members, set client permissions and that admins cannot bypass channel group restrictions or create server groups / channel groups with join power or join abilities. Also if private rooms are a branch off from another room, be sure that either nobody can access that higher level room to prevent someone's channel group spilling over into its child rooms, or that you assign the b_channel_group_inheritance_end to all the channels concerened to prevent someone from gaining access by proxy from the secure room's parent room.

Unless I have forgotten to mention something, that is required to make sure nobody can bypass the protection. Make sure default join power is 0 and requirement 100 on each private room and maybe even disable all three join types also. Use the channel group to give access for that specific room. You cannot get better privacy and security for rooms in my opinion.

edit: One thing I remembered just now is you have to also prevent admins from being able to create tokens. This is because someone could make a token for the channel admin or "Channel Access" channel group and use it to get into a secure room.

[franchino87]

and...what can i do if i have this situation:
Game1 and Game2
Game1 User shouldn't join Game2 Channel
Game2 User shouldn't join Game1 Channel

this is the option i'm looking for
http://tinypic.com/view.php?pic=2v0g4ef&s=6
the problem is that it doesn't longer exist!
is there any other possibility?

[ReBeL]

Can anyone make TeamSpeak 3 tutorial regarding restrict channel access "user join a specific channel" and upload it to Youtube for all the noobies (like me)................... and post the link here!!!!!!!!!!!!!!!!!!!!!!!!!!!

[PotaBlava]

Can anyone make TeamSpeak 3 tutorial regarding restrict channel access "user join a specific channel" and upload it to Youtube

Reading post#1 here:
http://forum.teamspeak.com/showthrea...cific-channel)
is not enough?

[ReBeL]

I cant git mine to work, I have done everything but cant get it to work