GlymeraPermissions - Command Access Control

Control which commands your players can use. Whitelist or blacklist mode, subcommand-level precision, instant in-game management - no restart needed.

Most actual version only working for Hytale stable 5 ! Don't miss my other exciting projects — take a look at GlymeraCraft's Profile Discord: https://discord.gg/s5NRFWfxgy

What is GlymeraPermissions?

Hytale has no built-in command permission system. By default, every command registered by any plugin is available to every player - unless the plugin developer manually added an OP check. If they forgot, the command is wide open.

GlymeraPermissions fixes this at the server level. It scans all registered commands at startup and restricts access based on your configuration. Commands blocked by GlymeraPermissions require OP status to execute. Commands you whitelist remain available to everyone.

Important: GlymeraPermissions adds a security layer on top of existing plugins. It can block commands that a plugin left open, but it cannot override restrictions that a plugin enforces internally. If a plugin has its own OP check built in, that check still applies even if GlymeraPermissions allows the command. Think of it as a gate before the door - GlymeraPermissions can close the gate, but it cannot open a locked door behind it.

Pure server-side plugin - no client mod required.

How It Works

On server startup, GlymeraPermissions scans all registered commands (including subcommands). Depending on your chosen mode:

Whitelist mode (default, recommended): All commands without existing permissions are blocked for non-OPs. Only commands you explicitly whitelist are available to everyone.
Blacklist mode: All commands remain open. Only commands you explicitly blacklist are restricted to OPs.

Commands that already have permissions set by their own plugin are not touched - they are already protected.

OPs always have full access to all commands regardless of GlymeraPermissions settings.

Commands

Command	Description
`/perms`	Show current status and statistics
`/perms mode whitelist\|blacklist`	Switch between modes
`/perms add &lt;command&gt;`	Add command to active list (e.g. `tpp` or `tpp.set`)
`/perms remove &lt;command&gt;`	Remove command from active list
`/perms list`	Show all entries in the active list
`/perms scan`	Re-scan all commands (e.g. after hot-reload)
`/perms info &lt;command&gt;`	Show permission details for a command
`/perms reload`	Reload config from file

All /perms commands are OP-only.

Subcommand Precision

You can control access at the subcommand level using dot notation:

/perms add tpp → allows ALL /tpp subcommands (set, del, show, name)
/perms add tpp.set → allows ONLY /tpp set, rest stays blocked
/perms add tpp.show → allows ONLY /tpp show

This works at any depth for nested subcommands.

Configuration

Config file is generated at first startup:

mods/de.glymera_GlymeraPermissions/config.json

{
  "mode": "whitelist",
  "whitelist": [
    "help",
    "tell",
    "msg",
    "w"
  ],
  "blacklist": [],
  "logBlocked": true
}

Setting	Default	Description
`mode`	`"whitelist"`	`"whitelist"` or `"blacklist"`
`whitelist`	`["help","tell","msg","w"]`	Commands available to all players (whitelist mode)
`blacklist`	`[]`	Commands restricted to OPs (blacklist mode)
`logBlocked`	`true`	Log restricted commands to console on scan

Changes made via /perms commands are automatically saved to config.

Installation

Place GlymeraPermissions-1.0.0.jar in your server's mods/ folder
Start (or restart) the server
Done! Default whitelist mode is active.

Features

Two modes - Whitelist (secure by default) or blacklist (open by default)
Subcommand precision - Control access down to individual subcommands
Live management - Add/remove/switch mode in-game, no restart needed
Automatic scanning - Finds all commands from all plugins at startup
Re-scan on demand - /perms scan after hot-reloading plugins
Non-destructive - Only adds restrictions, never removes existing ones
OP passthrough - Operators always have full access
Console logging - See exactly which commands were restricted
No asset pack - Pure server-side, no client downloads needed

Good to Know

GlymeraPermissions runs its scan 3 seconds after startup to ensure all plugins have registered their commands
Commands that already have permissions from their own plugin are skipped
GlymeraPermissions cannot grant access to commands that are internally restricted by their source plugin
The /perms command itself is always OP-only and cannot be accidentally locked out
Compatible with all other Glymera plugins

Made with care by Glymera for the Hytale community