From 8a3e37ae73e9d1b17b59827797ca697017a28eef Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 18 Jul 2026 21:21:20 -0500 Subject: [PATCH] docs(website): staff in-game location is admin/moderator-only The "What each audience sees" table said the public "Staff online" list is shown "with name + map location". Location is now privileged: the server includes map/coords only for admin/moderator callers and strips them from the payload for players and the public. Update the wording to match (RunicGateway/website#72). Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01XmHdsbnLzDMAVQkAoTQSBe --- website/website-README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/website-README.md b/website/website-README.md index f6ac75d..35b71f4 100644 --- a/website/website-README.md +++ b/website/website-README.md @@ -331,7 +331,7 @@ character**; players and editor/moderator staff are limited to their own linked | Surface | Endpoints | Who | Data | |---|---|---|---| -| **Public** | `/api/v1/public/shard/*` (`status`, `feed`, `economy`, `online`, `idoc`, `stream`) | anyone | Shard up/down, gold-supply series, IDOC houses, a curated live feed, and **"Staff online"** โ€” only players whose account is linked to a **staff** user (admin/editor/moderator), shown with name + map location. Linked *players* are never listed publicly; no vitals or account are exposed. | +| **Public** | `/api/v1/public/shard/*` (`status`, `feed`, `economy`, `online`, `idoc`, `stream`) | anyone | Shard up/down, gold-supply series, IDOC houses, a curated live feed, and **"Staff online"** โ€” only players whose account is linked to a **staff** user (admin/editor/moderator), shown by name. Their in-game **map location is only included for admin/moderator viewers** โ€” for players and the public it is stripped from the payload entirely (server-enforced, not just hidden in the UI). Linked *players* are never listed publicly; no vitals or account are exposed. | | **Player** | `/api/v1/player/shard/*` (`link`, `accounts`, `roster/:account`, `vendors/:account`, `char/:serial`, `sales`) | logged-in player | Their own linked accounts: character rosters, character sheets, player-vendor snapshots, and recent vendor sales. | | **Admin** | `/api/v1/admin/shard/*` (self-linking, same as player) ยท `/api/v1/admin/uo-link/*` (`config`, `towncrier`, `stream`) | staff / admin | Staff link their own accounts like players; **admins** additionally read *any* character's data, edit the sidecar connection config, publish/remove **town-crier** messages, and subscribe to the full event stream (incl. audit/cheat). |