security.rst: add status.commands and partmsg

This commit is contained in:
Aminda Suomalainen 2021-06-29 16:09:09 +03:00 committed by Val Lorentz
parent 271132c215
commit 371de50277

View File

@ -161,11 +161,13 @@ Again, if this is undesirable to you, you can do the following:
variables are, of course, always hidden from users by default).
* Prevent users from listing available plugins and commands:
``defaultcapability add -misc.list``,
``defaultcapability add -misc.apropos``, and
``defaultcapability add -plugin``
``defaultcapability add -misc.apropos``,
``defaultcapability add -plugin``, and
``defaultcapability add -status.commands``
* Hide the version from users: ``defaultcapability add -misc.version``,
and also make sure it's not in ``supybot.user`` or
``supybot.plugins.Owner.quitMsg``.
and also make sure it's not in ``supybot.user``,
``supybot.plugins.Owner.quitMsg`` or
``supybot.plugins.Channel.partMsg``.
* Hide capabilities users are missing to run a command:
``supybot.reply.error.noCapability``
* Replace errors with a generic reply: ``supybot.reply.error.detailed``