Permissions System

Introduction

This article explains how the permissions system works, starting from v123.

WARNING

Starting from v123, the default permissions Mode... is set to Let in with enabled Notify setting. This is a happy medium that simplifies interaction with furniture. You can change this any time using the Play HUD Menu (the ☰ button to the left of the fluids Stop button).

If you keep default permissions as is, you will receive a notification in your local chat when any furniture or other device attempts to play with your Obsidian, and will be able to change the behavior from there.

NOTE

The settings are kept in the actual Device you are wearing, and not in the HUD. The HUD is only used to communicate with the Device via its interface.

To open your Obsidian’s permissions:

1. Make sure you have your Play HUD and Obsidian attached.
2. Click the Play HUD Menu (the ☰ button to the left of the fluids Stop button).

You don't need to give permissions to your own devices, whether attached or rezzed.

Objects you own or wear can always play with your Obsidian, and are never added to your Blocklist.

• By default, permissions are set to Mode Let in with Notify on. You will see a message in local chat the first time an unknown device plays with your Obsidian.

  Watch for these messages in local chat. Each one lets you Blocklist the device or Blocklist Owner. In this mode the device’s commands reach your Obsidian first, and you decide afterwards what to do.

• If you pick Mode Keep out, you’ll see the opposite choices: Allowlist and Allowlist Owner.

• The safest mode, with full control, is Ask. It asks you, once per avatar or device, whether you want to allow it.

  Keep in mind that in Ask and Keep out modes, any commands sent to your Obsidian before you allowlist a device or avatar are discarded.

Modes

The Mode decides what happens to anyone who is not on your Allowlist or Blocklist. Change it with Mode... in the menu (the ☰ button to the left of the fluids Stop button).

Mode	What happens	What you are told
Keep out	They are kept out.	One message per avatar or device, if Notify is on.
Ask	They are kept out until you decide.	Always one message per avatar or device, with links to decide.
Let in	They are let in.	One message per avatar or device, if Notify is on.

You are told about each avatar or device only once. Clear Cache makes the messages appear again.

Links in the messages

Only you can see these messages. Click a link to act on it.

Link	What it does
Allowlist	Always lets in this avatar or device.
Allowlist Owner	Always lets in the person who owns this device, with all their devices.
Blocklist	Always refuses this avatar or device.
Blocklist Owner	Always refuses the person who owns this device, with all their devices.
Change Mode...	Opens the Mode menu.
Allowlist... > Edit...	Opens the Allowlist so you can edit it by hand.

The Owner links only appear when the message is about a device. A message about a Play HUD or a Remote HUD is about the person wearing it, so Allowlist and Blocklist there act on that person.

Allowlist

• Holds up to six avatars or devices. They are let in whatever the Mode is.
• Allowlisting a person lets in all of their devices.
• Allowlisting someone you had blocklisted removes the block.
• When slots 1–5 are full, Allowlist and pairing overwrite slot 6.
• To edit it, open Allowlist..., pick a slot, then choose Nearby..., Recent..., UUID... or Delete.
• When someone accepts a Remote HUD you offered with Send..., they are added to the Allowlist automatically.

Blocklist

• Anyone on it is refused whatever the Mode is, and you get no more messages about them.
• Blocklist refuses one device. Blocklist Owner refuses the person and everything they own, and removes their devices from your Allowlist.
• A device can come back with a new identity after it is rezzed or attached again. To keep someone out for good, use Blocklist Owner.
• To unblock one avatar or device, Allowlist it. To unblock everyone, use Clear Cache.

Who gets in

Sender’s state	Result
Device allowlisted	let in
Owner allowlisted, device not blocked	let in
Owner allowlisted, device blocked	refused
Device or owner blocked, nothing allowlisted	refused
Nothing recorded	handled by the Mode

A decision about a specific device always wins over a decision about its owner.

Clear Cache

Clear Cache makes prompts and notices appear again and unblocks everyone you blocklisted. Your Allowlist is not touched. There is no other way to edit the Blocklist.

Good to know

Situation	What to do
A device you blocked stays blocked after you allowlist its owner.	Allowlist the device itself.
A device that is out of the region when you click Blocklist Owner keeps its Allowlist slot.	It will normally come back with a new identity, so the old slot no longer matches it. You can also delete the slot in Allowlist....