Permissions

Administration and physical cabinet work are separate. The menu hides unauthorized actions, but the server also checks permissions when actions execute.

Setting	Default	Allows
`Config.Access.admin`	`'highwaysigns.admin'`	Administration and placement. Also grants normal operational actions.
`Config.Access.cabinet`	`nil`	Optional cabinet entry rule. With nil, controller entry follows operate; service entry follows repair or sabotage.
`Config.Access.operate`	`false`	Text, symbols, cycles and power editing.
`Config.Access.link`	`'highwaysigns.link'`	Live linking and gantry-side sync; also needs operate access.
`Config.Access.repair`	`false`	Original wiring repair task.
`Config.Access.sabotage`	`false`	Original physical LED wiring sabotage.

For operational actions, false allows everyone. An ACE string restricts the action. Explicit cabinet = false allows entry without automatically allowing editing or repairs. An explicit cabinet ACE adds an entry restriction.

Example: DOT operates and repairs

Add these settings to config.lua:

Config.Access.cabinet = 'highwaysigns.cabinet'
Config.Access.operate = 'highwaysigns.operate'
Config.Access.link = 'highwaysigns.link'
Config.Access.repair = 'highwaysigns.repair'
Config.Access.sabotage = 'highwaysigns.sabotage'

Grant your existing DOT group in server configuration:

add_ace group.dot highwaysigns.cabinet allow
add_ace group.dot highwaysigns.operate allow
add_ace group.dot highwaysigns.link allow
add_ace group.dot highwaysigns.repair allow

Assign players to your server's DOT principal separately. This example intentionally gives DOT no sabotage ACE. The normal admin override still applies; setting an ungranted sabotage ACE does not remove that override.

LUX permission modes

Optional LUX DOT authorization can require, replace or supplement normal operational checks. It never grants the administration ACE or physical sabotage permission. In require/replace modes, the normal admin ACE does not bypass the LUX check for covered physical actions; administration endpoints remain separate.

Opening a cabinet does not reserve permission indefinitely. Actions and active sessions are rechecked. Walking away, dying, disconnecting or losing access ends or cancels the interaction. Updating the UI alone cannot authorize a server action.