I've recently found out that anyone who plays my server has the ability to restart my server and mingle with the resources. I've tried some editing, but I haven't been able to fix this. People login my server and type in the console "debugscript 3" and they can see the live server log and I think they can even read PMs. This is frustrating and I hope someone can fix it for me or at least tell me how to fix it. If I need to post anything further, please let me know. I have a Roleplay server. And yes I refered to the wiki about this, but I still can't manage to "fix" it. I use MySQL (if that's relevant to know).
Here is my acl.xml file:
"Everyone">
"Default"/>
"user.*"/>
"resource.*"/>
"resource.ucp"/>
"Moderator">
"Moderator"/>
"resource.mapcycler"/>
"resource.mapmanager"/>
"resource.resourcemanager"/>
"resource.votemanager"/>
"SuperModerator">
"Moderator"/>
"SuperModerator"/>
"Admin">
"Moderator"/>
"SuperModerator"/>
"Admin"/>
"RPC"/>
"resource.admin"/>
"resource.webadmin"/>
"resource.account-system"/>
"resource.achievement-system"/>
"resource.admin-system"/>
"resource.animation-system"/>
"resource.anticheat-system"/>
"resource.bank-system"/>
"resource.carlist-system"/>
"resource.carshop-system"/>
"resource.camera-system"/>
"resource.chat-system"/>
"resource.computers-system"/>
"resource.elevator-system"/>
"resource.faction-system"/>
"resource.fuel-system"/>
"resource.gate-system"/>
"resource.global"/>
"resource.help-system"/>
"resource.id-system"/>
"resource.interior-system"/>
"resource.irc"/>
"resource.item-system"/>
"resource.job-system"/>
"resource.license-system"/>
"resource.lves-system"/>
"resource.lvpd-system"/>
"resource.map-system"/>
"resource.mysql-system"/>
"resource.object-system"/>
"resource.paynspray-system"/>
"resource.phone-system"/>
"resource.realism-system"/>
"resource.realtime-system"/>
"resource.report-system"/>
"resource.resource-keeper"/>
"resource.saveplayer-system"/>
"resource.savevehicle-system"/>
"resource.scoreboard-system"/>
"resource.shop-system"/>
"resource.spike-system"/>
"resource.statistics-system"/>
"resource.startup"/>
"resource.tag-system"/>
"resource.vehicle-system"/>
"resource.valhallashield"/>
"resource.weather-system"/>
"Console">
"Moderator"/>
"SuperModerator"/>
"Admin"/>
"RPC"/>
"user.Console"/>
"RPC">
"RPC"/>
"MapEditor">
"MapEditor"/>
"resource.editor_main"/>
"resource.edf"/>
"raceACLGroup">
"raceACL"/>
"resource.race"/>
"Owner">
"general.ModifyOtherObjects" access="false"/>
"general.http" access="false"/>
"command.start" access="false"/>
"command.stop" access="false"/>
"command.stopall" access="false"/>
"command.gamemode" access="false"/>
"command.changemode" access="false"/>
"command.changemap" access="false"/>
"command.stopmode" access="false"/>
"command.stopmap" access="false"/>
"command.skipmap" access="false"/>
"command.restart" access="false"/>
"command.refresh" access="false"/>
"command.addaccount" access="false"/>
"command.delaccount" access="false"/>
"command.debugscript" access="false"/>
"command.chgpass" access="false"/>
"command.mute" access="false"/>
"command.unmute" access="false"/>
"command.kick" access="false"/>
"command.ban" access="false"/>
"command.banip" access="false"/>
"command.unbanip" access="false"/>
"command.shutdown" access="false"/>
"command.install" access="false"/>
"command.aexec" access="false"/>
"command.whois" access="false"/>
"command.whowas" access="false"/>
"function.executeCommandHandler" access="false"/>
"function.setPlayerMuted" access="false"/>
"function.addAccount" access="false"/>
"function.removeAccount" access="false"/>
"function.setAccountPassword" access="false"/>
"function.kickPlayer" access="false"/>
"function.banIP" access="false"/>
"function.banPlayer" access="false"/>
"function.banSerial" access="false"/>
"function.getBansXML" access="false"/>
"function.unbanIP" access="false"/>
"function.unbanSerial" access="false"/>
"function.getClientIP" access="false"/>
"function.setServerPassword" access="false"/>
"function.getServerPassword" access="false"/>
"function.callRemote" access="false"/>
"function.startResource" access="false"/>
"function.stopResource" access="false"/>
"function.restartResource" access="false"/>
"function.createResource" access="false"/>
"function.copyResource" access="false"/>
"function.addResourceMap" access="false"/>
"function.addResourceConfig" access="false"/>
"function.removeResourceFile" access="false"/>
"function.setResourceDefaultSetting" access="false"/>
"function.removeResourceDefaultSetting" access="false"/>
"function.aclReload" access="false"/>
"function.aclSave" access="false"/>
"function.aclCreate" access="false"/>
"function.aclDestroy" access="false"/>
"function.aclSetRight" access="false"/>
"function.aclRemoveRight" access="false"/>
"function.aclCreateGroup" access="false"/>
"function.aclDestroyGroup" access="false"/>
"function.aclGroupAddACL" access="false"/>
"function.aclGroupRemoveACL" access="false"/>
"function.aclGroupAddObject" access="false"/>
"function.aclGroupRemoveObject" access="false"/>
"Moderator">
"general.ModifyOtherObjects" access="false"/>
"command.start" access="true"/>
"command.stop" access="true"/>
"command.stopall" access="true"/>
"command.gamemode" access="true"/>
"command.changemode" access="true"/>
"command.changemap" access="true"/>
"command.stopmode" access="true"/>
"command.stopmap" access="true"/>
"command.skipmap" access="true"/>
"command.restart" access="true"/>
"command.mute" access="true"/>
"command.unmute" access="true"/>
"command.kick" access="true"/>
"command.ban" access="true"/>
"command.banip" access="true"/>
"command.unbanip" access="true"/>
"command.whois" access="true"/>
"command.whowas" access="true"/>
"function.setPlayerMuted" access="true"/>
"function.kickPlayer" access="true"/>
"function.banIP" access="true"/>
"function.banPlayer" access="true"/>
"function.banSerial" access="true"/>
"function.getBansXML" access="true"/>
"function.unbanIP" access="true"/>
"function.unbanSerial" access="true"/>
"function.getClientIP" access="true"/>
"function.startResource" access="true"/>
"function.stopResource" access="true"/>
"function.restartResource" access="true"/>
"SuperModerator">
"general.ModifyOtherObjects" access="false"/>
"command.refresh" access="true"/>
"command.addaccount" access="true"/>
"command.delaccount" access="true"/>
"command.chgpass" access="true"/>
"function.addAccount" access="true"/>
"function.removeAccount" access="true"/>
"function.setAccountPassword" access="true"/>
"Admin">
"general.ModifyOtherObjects" access="true"/>
"general.http" access="true"/>
"command.shutdown" access="true"/>
"command.install" access="true"/>
"command.aexec" access="true"/>
"command.debugscript" access="true"/>
"command.refresh" access="true"/>
"function.executeCommandHandler" access="true"/>
"function.setServerPassword" access="true"/>
"function.getServerPassword" access="true"/>
"function.createResource" access="true"/>
"function.copyResource" access="true"/>
"function.addResourceMap" access="true"/>
"function.addResourceConfig" access="true"/>
"function.removeResourceFile" access="true"/>
"function.setResourceDefaultSetting" access="true"/>
"function.removeResourceDefaultSetting" access="true"/>
"function.aclReload" access="true"/>
"function.aclSave" access="true"/>
"function.aclCreate" access="true"/>
"function.aclDestroy" access="true"/>
"function.aclSetRight" access="true"/>
"function.aclRemoveRight" access="true"/>
"function.aclCreateGroup" access="true"/>
"function.aclDestroyGroup" access="true"/>
"function.aclGroupAddACL" access="true"/>
"function.aclGroupRemoveACL" access="true"/>
"function.aclGroupAddObject" access="true"/>
"function.aclGroupRemoveObject" access="true"/>
"RPC">
"function.callRemote" access="true"/>
"MapEditor">
"general.ModifyOtherObjects" access="true"/>
"function.startResource" access="true"/>
"function.stopResource" access="true"/>
"function.restartResource" access="true"/>
"function.createResource" access="true"/>
"function.copyResource" access="true"/>
"function.addResourceMap" access="true"/>
"function.addResourceConfig" access="true"/>
"function.removeResourceFile" access="true"/>
"function.setResourceDefaultSetting" access="true"/>
"function.removeResourceDefaultSetting" access="true"/>
"function.xmlLoadFile" access="true"/>
"raceACL">
"general.ModifyOtherObjects" access="true"/>
"function.xmlLoadFile" access="true"/>