#How to configure the system so that only administrators can restart the gateway, while others cannot
1 messages · Page 1 of 1 (latest)
Let me verify the exact auth/permission model in the docs/code so I don't hand-wave this.
There isn’t a separate per-command “admins can /restart, others can’t” RBAC layer right now.
What is supported:
- Disable chat restarts entirely
{
commands: {
restart: false
}
}
- Restrict command access to admin IDs only
{
commands: {
restart: true,
allowFrom: {
discord: [
"user:123456789012345678",
"user:234567890123456789"
]
}
}
}
Or set explicit owners:
{
commands: {
ownerAllowFrom: [
"discord:123456789012345678"
]
}
}
Important caveat: commands.allowFrom is broader than just /restart, it controls command/directive authorization generally. So if you need fine-grained per-command roles, OpenClaw does not currently expose that as a separate config.
Also, treat gateway.auth.token / password as full admin credentials. Anyone with those is effectively an operator.
Docs: