Skip to content

Permissions

Every permission defaults to server operators. pp.* grants all command permissions and pp.admin. Other users need explicit permissions from the server’s permission manager.

Pixel Painter edits world blocks without survival inventory costs or an external region-protection check. Assign painting and download capabilities to trusted builders rather than treating them as ordinary player features.

NodePurpose
pp.*Grants all Pixel Painter commands and administrative access.
pp.helpBrowse available commands and their usage.
pp.createCreate block paintings from local source images.
pp.howmanyblocksEstimate output dimensions, transparency and material counts.
pp.undoBrowse and restore accessible painting recovery journals.
pp.cancelCancel your image preparation or active world operation.
pp.listBrowse available source image files.
pp.specsInspect the original dimensions of a source image.
pp.materialsBrowse supported block colors and palette families.
pp.downloadDownload images from configured trusted HTTPS hosts.
pp.deleteDelete source image files without removing paintings or journals.
pp.reloadReload settings, message templates and block colors.
pp.adminView and undo other players’ journals and cancel their world operations.

Creation records the player’s UUID in the recovery journal. History and undo show records owned by that player unless they also have pp.admin.

pp.admin permits cross-player journal access and cancellation, but is not a replacement for the command’s action permission. For example, undoing someone else’s work requires both pp.undo and pp.admin.

Cross-player access does not bypass world limits, journal capacity, busy checks or region-overlap checks. A source file is shared within the plugin data folder; source-file operations do not use painting-journal ownership.


RoleSuggested nodes
Reference readerpp.help, pp.list, pp.specs, pp.materials, pp.howmanyblocks
Trusted painterReference nodes plus pp.create, pp.undo, pp.cancel
Source managerAdd pp.download and pp.delete only when source-file changes are appropriate
Recovery administratorpp.undo, pp.cancel, pp.admin, plus reference/history access
Full administratorpp.*

Changing configuration or trusted hosts requires pp.reload plus filesystem access to the server configuration. Granting a download permission alone does not authorize arbitrary hosts.