The worst mistake made on san
(by myself and other admins and owners, over time)
was to give too many rights out to too many staff.
One complaint is that IP blocking does not work for dial up users, tho. I conencted five times and got all different IP addresses,
even the first three numbers changeged, which means you cannot possibly lock in any ip range on a dialup.
ie. you could not allow 204.*.*.* cause the 204 would change.
Suggestion (if it hasnt been done already)
Allow upload and overwrite if the file is the same name,
but disallow deleting files for LAT/NAT accounts.
Track which account and IP modified each file for each change
in a log.
Have backups for each playerworld that are made every
night (ws_ftp pro form
www.ipswitch.com has a Synchronise feature thats quite nice) - which you should be able to afford to do now that graal is all p2p.
So if hax0rs delete, then you can lock down all but the owner account, force a password change and email it to the owner,
and then upload the last saved files up at graal headquarters.