From 2df70799f81916683692b7aeeeb9d3f3d2661946 Mon Sep 17 00:00:00 2001
From: chromiumboy <50505512+chromiumboy@users.noreply.github.com>
Date: Tue, 8 Aug 2023 13:30:46 -0500
Subject: [PATCH] Add access configurator (#18638)

The access configurator programs the access levels of any access reader. To use the access configurator, players must:

- Insert an ID card
- Click a nearby entity with an access reader with the access configurator in hand
- Change the access list

Note that players only need one of the access levels listed on the device to lock/unlock it, but will only be able to alter access settings when they all of the access levels listed on the device

For example, an airlock which has 'Science' and 'Engineering' access listed can be opened by any player with either 'Science' or 'Engineering' access. However, to change the access settings on this airlock, a player must have both 'Science' and 'Engineering' access. This is to prevent people from easily breaking into secure areas with this tool, by adding one of their own access levels to the target device

Obviously, the most useful ID card to use with this tool is one with all access, since it can change the settings of any device. Removing all access requirements from a device will make it useable by anyone.

---------

Co-authored-by: Kevin Zheng <kevinz5000@gmail.com>
---
 .../Access/AccessOverriderSystem.cs           |  11 +
 .../UI/AccessOverriderBoundUserInterface.cs   |  72 +++++
 .../Access/UI/AccessOverriderWindow.xaml      |  23 ++
 .../Access/UI/AccessOverriderWindow.xaml.cs   | 111 ++++++++
 .../Access/Systems/AccessOverriderSystem.cs   | 265 ++++++++++++++++++
 .../Components/AccessOverriderComponent.cs    |  80 ++++++
 .../Systems/SharedAccessOverriderSystem.cs    |  72 +++++
 .../systems/access-overrider-system.ftl       |   9 +
 .../Catalog/Fills/Lockers/heads.yml           |   3 +
 .../Objects/Tools/access_configurator.yml     |  74 +++++
 .../Doors/Airlocks/base_structureairlocks.yml |   1 +
 .../access_configurator.rsi/equipped-BELT.png | Bin 0 -> 1422 bytes
 .../Tools/access_configurator.rsi/icon.png    | Bin 0 -> 7579 bytes
 .../access_configurator.rsi/inhand-left.png   | Bin 0 -> 2401 bytes
 .../access_configurator.rsi/inhand-right.png  | Bin 0 -> 2363 bytes
 .../Tools/access_configurator.rsi/meta.json   |  62 ++++
 16 files changed, 783 insertions(+)
 create mode 100644 Content.Client/Access/AccessOverriderSystem.cs
 create mode 100644 Content.Client/Access/UI/AccessOverriderBoundUserInterface.cs
 create mode 100644 Content.Client/Access/UI/AccessOverriderWindow.xaml
 create mode 100644 Content.Client/Access/UI/AccessOverriderWindow.xaml.cs
 create mode 100644 Content.Server/Access/Systems/AccessOverriderSystem.cs
 create mode 100644 Content.Shared/Access/Components/AccessOverriderComponent.cs
 create mode 100644 Content.Shared/Access/Systems/SharedAccessOverriderSystem.cs
 create mode 100644 Resources/Locale/en-US/access/systems/access-overrider-system.ftl
 create mode 100644 Resources/Prototypes/Entities/Objects/Tools/access_configurator.yml
 create mode 100644 Resources/Textures/Objects/Tools/access_configurator.rsi/equipped-BELT.png
 create mode 100644 Resources/Textures/Objects/Tools/access_configurator.rsi/icon.png
 create mode 100644 Resources/Textures/Objects/Tools/access_configurator.rsi/inhand-left.png
 create mode 100644 Resources/Textures/Objects/Tools/access_configurator.rsi/inhand-right.png
 create mode 100644 Resources/Textures/Objects/Tools/access_configurator.rsi/meta.json

diff --git a/Content.Client/Access/AccessOverriderSystem.cs b/Content.Client/Access/AccessOverriderSystem.cs
new file mode 100644
index 0000000000..88d933c8c4
--- /dev/null
+++ b/Content.Client/Access/AccessOverriderSystem.cs
@@ -0,0 +1,11 @@
+using Content.Shared.Access.Systems;
+using JetBrains.Annotations;
+
+namespace Content.Client.Access
+{
+    [UsedImplicitly]
+    public sealed class AccessOverriderSystem : SharedAccessOverriderSystem
+    {
+
+    }
+}
diff --git a/Content.Client/Access/UI/AccessOverriderBoundUserInterface.cs b/Content.Client/Access/UI/AccessOverriderBoundUserInterface.cs
new file mode 100644
index 0000000000..cb43185484
--- /dev/null
+++ b/Content.Client/Access/UI/AccessOverriderBoundUserInterface.cs
@@ -0,0 +1,72 @@
+using Content.Shared.Access.Components;
+using Content.Shared.Access.Systems;
+using Content.Shared.Containers.ItemSlots;
+using Robust.Client.GameObjects;
+using Robust.Shared.Prototypes;
+using static Content.Shared.Access.Components.AccessOverriderComponent;
+
+namespace Content.Client.Access.UI
+{
+    public sealed class AccessOverriderBoundUserInterface : BoundUserInterface
+    {
+        [Dependency] private readonly IPrototypeManager _prototypeManager = default!;
+        private readonly SharedAccessOverriderSystem _accessOverriderSystem = default!;
+
+        private AccessOverriderWindow? _window;
+
+        public AccessOverriderBoundUserInterface(EntityUid owner, Enum uiKey) : base(owner, uiKey)
+        {
+            _accessOverriderSystem = EntMan.System<SharedAccessOverriderSystem>();
+        }
+
+        protected override void Open()
+        {
+            base.Open();
+
+            List<string> accessLevels;
+
+            if (EntMan.TryGetComponent<AccessOverriderComponent>(Owner, out var accessOverrider))
+            {
+                accessLevels = accessOverrider.AccessLevels;
+                accessLevels.Sort();
+            }
+
+            else
+            {
+                accessLevels = new List<string>();
+                _accessOverriderSystem.Log.Error($"No AccessOverrider component found for {EntMan.ToPrettyString(Owner)}!");
+            }
+
+            _window = new AccessOverriderWindow(this, _prototypeManager, accessLevels)
+            {
+                Title = EntMan.GetComponent<MetaDataComponent>(Owner).EntityName
+            };
+
+            _window.PrivilegedIdButton.OnPressed += _ => SendMessage(new ItemSlotButtonPressedEvent(PrivilegedIdCardSlotId));
+
+            _window.OnClose += Close;
+            _window.OpenCentered();
+        }
+
+        protected override void Dispose(bool disposing)
+        {
+            base.Dispose(disposing);
+            if (!disposing)
+                return;
+
+            _window?.Dispose();
+        }
+
+        protected override void UpdateState(BoundUserInterfaceState state)
+        {
+            base.UpdateState(state);
+            var castState = (AccessOverriderBoundUserInterfaceState) state;
+            _window?.UpdateState(castState);
+        }
+
+        public void SubmitData(List<string> newAccessList)
+        {
+            SendMessage(new WriteToTargetAccessReaderIdMessage(newAccessList));
+        }
+    }
+}
diff --git a/Content.Client/Access/UI/AccessOverriderWindow.xaml b/Content.Client/Access/UI/AccessOverriderWindow.xaml
new file mode 100644
index 0000000000..ae482140bc
--- /dev/null
+++ b/Content.Client/Access/UI/AccessOverriderWindow.xaml
@@ -0,0 +1,23 @@
+<DefaultWindow xmlns="https://spacestation14.io"
+            MinSize="650 290">
+    <BoxContainer Orientation="Vertical">
+        <GridContainer Columns="2">
+            <GridContainer Columns="3" HorizontalExpand="True">
+                <Label Text="{Loc 'access-overrider-window-privileged-id'}" />
+                <Button Name="PrivilegedIdButton" Access="Public"/>
+                <Label Name="PrivilegedIdLabel" />
+            </GridContainer>
+        </GridContainer>
+        <Label Name="TargetNameLabel" />
+        <Control MinSize="0 8"/>
+        <GridContainer Name="AccessLevelGrid" Columns="5" HorizontalAlignment="Center">
+
+            <!-- Access level buttons are added here by the C# code -->
+
+        </GridContainer>
+        <Control MinSize="0 8"/>
+        <Label Name="MissingPrivilegesLabel" />
+        <Control MinSize="0 4"/>
+        <Label Name="MissingPrivilegesText" />
+    </BoxContainer>
+</DefaultWindow>
diff --git a/Content.Client/Access/UI/AccessOverriderWindow.xaml.cs b/Content.Client/Access/UI/AccessOverriderWindow.xaml.cs
new file mode 100644
index 0000000000..6a4dcba307
--- /dev/null
+++ b/Content.Client/Access/UI/AccessOverriderWindow.xaml.cs
@@ -0,0 +1,111 @@
+using System.Linq;
+using Content.Shared.Access;
+using Content.Shared.Access.Systems;
+using Robust.Client.AutoGenerated;
+using Robust.Client.UserInterface.Controls;
+using Robust.Client.UserInterface.CustomControls;
+using Robust.Client.UserInterface.XAML;
+using Robust.Shared.Prototypes;
+using static Content.Shared.Access.Components.AccessOverriderComponent;
+
+namespace Content.Client.Access.UI
+{
+    [GenerateTypedNameReferences]
+    public sealed partial class AccessOverriderWindow : DefaultWindow
+    {
+        [Dependency] private readonly ILogManager _logManager = default!;
+        [Dependency] private readonly IPrototypeManager _prototypeManager = default!;
+
+        private readonly ISawmill _logMill = default!;
+        private readonly AccessOverriderBoundUserInterface _owner;
+        private readonly Dictionary<string, Button> _accessButtons = new();
+
+        public AccessOverriderWindow(AccessOverriderBoundUserInterface owner, IPrototypeManager prototypeManager,
+            List<string> accessLevels)
+        {
+            RobustXamlLoader.Load(this);
+            IoCManager.InjectDependencies(this);
+            _logMill = _logManager.GetSawmill(SharedAccessOverriderSystem.Sawmill);
+
+            _owner = owner;
+
+            foreach (var access in accessLevels)
+            {
+                if (!prototypeManager.TryIndex<AccessLevelPrototype>(access, out var accessLevel))
+                {
+                    _logMill.Error($"Unable to find accesslevel for {access}");
+                    continue;
+                }
+
+                var newButton = new Button
+                {
+                    Text = GetAccessLevelName(accessLevel),
+                    ToggleMode = true,
+                };
+
+                AccessLevelGrid.AddChild(newButton);
+                _accessButtons.Add(accessLevel.ID, newButton);
+                newButton.OnPressed += _ => SubmitData();
+            }
+        }
+
+        private static string GetAccessLevelName(AccessLevelPrototype prototype)
+        {
+            if (prototype.Name is { } name)
+                return Loc.GetString(name);
+
+            return prototype.ID;
+        }
+
+        public void UpdateState(AccessOverriderBoundUserInterfaceState state)
+        {
+            PrivilegedIdLabel.Text = state.PrivilegedIdName;
+            PrivilegedIdButton.Text = state.IsPrivilegedIdPresent
+                ? Loc.GetString("access-overrider-window-eject-button")
+                : Loc.GetString("access-overrider-window-insert-button");
+
+            TargetNameLabel.Text = state.TargetLabel;
+            TargetNameLabel.FontColorOverride = state.TargetLabelColor;
+
+            MissingPrivilegesLabel.Text = "";
+            MissingPrivilegesLabel.FontColorOverride = Color.Yellow;
+
+            MissingPrivilegesText.Text = "";
+            MissingPrivilegesText.FontColorOverride = Color.Yellow;
+
+            if (state.MissingPrivilegesList != null && state.MissingPrivilegesList.Any())
+            {
+                List<string> missingPrivileges = new List<string>();
+
+                foreach (string tag in state.MissingPrivilegesList)
+                {
+                    string privilege = Loc.GetString(_prototypeManager.Index<AccessLevelPrototype>(tag)?.Name ?? "generic-unknown");
+                    missingPrivileges.Add(privilege);
+                }
+
+                MissingPrivilegesLabel.Text = Loc.GetString("access-overrider-window-missing-privileges");
+                MissingPrivilegesText.Text = string.Join(", ", missingPrivileges);
+            }
+
+            var interfaceEnabled = state.IsPrivilegedIdPresent && state.IsPrivilegedIdAuthorized;
+
+            foreach (var (accessName, button) in _accessButtons)
+            {
+                button.Disabled = !interfaceEnabled;
+                if (interfaceEnabled)
+                {
+                    button.Pressed = state.TargetAccessReaderIdAccessList?.Contains(accessName) ?? false;
+                    button.Disabled = (!state.AllowedModifyAccessList?.Contains(accessName)) ?? true;
+                }
+            }
+        }
+
+        private void SubmitData()
+        {
+            _owner.SubmitData(
+
+                // Iterate over the buttons dictionary, filter by `Pressed`, only get key from the key/value pair
+                _accessButtons.Where(x => x.Value.Pressed).Select(x => x.Key).ToList());
+        }
+    }
+}
diff --git a/Content.Server/Access/Systems/AccessOverriderSystem.cs b/Content.Server/Access/Systems/AccessOverriderSystem.cs
new file mode 100644
index 0000000000..8184d5cbd8
--- /dev/null
+++ b/Content.Server/Access/Systems/AccessOverriderSystem.cs
@@ -0,0 +1,265 @@
+using Content.Shared.Access.Components;
+using Content.Shared.Access.Systems;
+using Content.Shared.Administration.Logs;
+using Content.Shared.Database;
+using Content.Shared.Interaction;
+using JetBrains.Annotations;
+using Robust.Server.GameObjects;
+using Robust.Shared.Containers;
+using System.Linq;
+using static Content.Shared.Access.Components.AccessOverriderComponent;
+using Content.Server.Popups;
+using Content.Shared.DoAfter;
+
+namespace Content.Server.Access.Systems;
+
+[UsedImplicitly]
+public sealed class AccessOverriderSystem : SharedAccessOverriderSystem
+{
+    [Dependency] private readonly UserInterfaceSystem _userInterface = default!;
+    [Dependency] private readonly AccessReaderSystem _accessReader = default!;
+    [Dependency] private readonly ISharedAdminLogManager _adminLogger = default!;
+    [Dependency] private readonly SharedInteractionSystem _interactionSystem = default!;
+    [Dependency] private readonly PopupSystem _popupSystem = default!;
+    [Dependency] private readonly SharedAudioSystem _audioSystem = default!;
+    [Dependency] private readonly SharedDoAfterSystem _doAfterSystem = default!;
+
+    public override void Initialize()
+    {
+        base.Initialize();
+
+        SubscribeLocalEvent<AccessOverriderComponent, WriteToTargetAccessReaderIdMessage>(OnWriteToTargetAccessReaderIdMessage);
+        SubscribeLocalEvent<AccessOverriderComponent, ComponentStartup>(UpdateUserInterface);
+        SubscribeLocalEvent<AccessOverriderComponent, EntInsertedIntoContainerMessage>(UpdateUserInterface);
+        SubscribeLocalEvent<AccessOverriderComponent, EntRemovedFromContainerMessage>(UpdateUserInterface);
+        SubscribeLocalEvent<AccessOverriderComponent, AfterInteractEvent>(AfterInteractOn);
+        SubscribeLocalEvent<AccessOverriderComponent, AccessOverriderDoAfterEvent>(OnDoAfter);
+        SubscribeLocalEvent<AccessOverriderComponent, BoundUIOpenedEvent>(UpdateUserInterface);
+        SubscribeLocalEvent<AccessOverriderComponent, BoundUIClosedEvent>(OnClose);
+    }
+
+    private void AfterInteractOn(EntityUid uid, AccessOverriderComponent component, AfterInteractEvent args)
+    {
+        if (args.Target == null || !TryComp(args.Target, out AccessReaderComponent? accessReader))
+            return;
+
+        if (!_interactionSystem.InRangeUnobstructed(args.User, (EntityUid) args.Target))
+            return;
+
+        var doAfterEventArgs = new DoAfterArgs(args.User, component.DoAfterTime, new AccessOverriderDoAfterEvent(), uid, target: args.Target, used: uid)
+        {
+            BreakOnTargetMove = true,
+            BreakOnUserMove = true,
+            BreakOnDamage = true,
+            NeedHand = true,
+        };
+
+        _doAfterSystem.TryStartDoAfter(doAfterEventArgs);
+    }
+
+    private void OnDoAfter(EntityUid uid, AccessOverriderComponent component, AccessOverriderDoAfterEvent args)
+    {
+        if (!TryComp(args.User, out ActorComponent? actor))
+            return;
+
+        if (args.Handled || args.Cancelled)
+            return;
+
+        if (args.Args.Target != null)
+        {
+            component.TargetAccessReaderId = args.Args.Target.Value;
+            _userInterface.TryOpen(uid, AccessOverriderUiKey.Key, actor.PlayerSession);
+            UpdateUserInterface(uid, component, args);
+        }
+
+        args.Handled = true;
+    }
+
+    private void OnClose(EntityUid uid, AccessOverriderComponent component, BoundUIClosedEvent args)
+    {
+        if (args.UiKey.Equals(AccessOverriderUiKey.Key))
+        {
+            component.TargetAccessReaderId = new();
+        }
+    }
+
+    private void OnWriteToTargetAccessReaderIdMessage(EntityUid uid, AccessOverriderComponent component, WriteToTargetAccessReaderIdMessage args)
+    {
+        if (args.Session.AttachedEntity is not { Valid: true } player)
+            return;
+
+        TryWriteToTargetAccessReaderId(uid, args.AccessList, player, component);
+
+        UpdateUserInterface(uid, component, args);
+    }
+
+    private void UpdateUserInterface(EntityUid uid, AccessOverriderComponent component, EntityEventArgs args)
+    {
+        if (!component.Initialized)
+            return;
+
+        var privilegedIdName = string.Empty;
+        var targetLabel = Loc.GetString("access-overrider-window-no-target");
+        var targetLabelColor = Color.Red;
+
+        string[]? possibleAccess = null;
+        string[]? currentAccess = null;
+        string[]? missingAccess = null;
+
+        if (component.TargetAccessReaderId is { Valid: true } accessReader)
+        {
+            targetLabel = Loc.GetString("access-overrider-window-target-label") + " " + EntityManager.GetComponent<MetaDataComponent>(component.TargetAccessReaderId).EntityName;
+            targetLabelColor = Color.White;
+
+            List<HashSet<string>> currentAccessHashsets = EntityManager.GetComponent<AccessReaderComponent>(accessReader).AccessLists;
+            currentAccess = ConvertAccessHashSetsToList(currentAccessHashsets)?.ToArray();
+        }
+
+        if (component.PrivilegedIdSlot.Item is { Valid: true } idCard)
+        {
+            privilegedIdName = EntityManager.GetComponent<MetaDataComponent>(idCard).EntityName;
+
+            if (component.TargetAccessReaderId is { Valid: true })
+            {
+                possibleAccess = _accessReader.FindAccessTags(idCard).ToArray();
+            }
+
+            if (currentAccess != null && possibleAccess != null)
+            {
+                missingAccess = currentAccess.Except(possibleAccess).ToArray();
+            }
+        }
+
+        AccessOverriderBoundUserInterfaceState newState;
+
+        newState = new AccessOverriderBoundUserInterfaceState(
+            component.PrivilegedIdSlot.HasItem,
+            PrivilegedIdIsAuthorized(uid, component),
+            currentAccess,
+            possibleAccess,
+            missingAccess,
+            privilegedIdName,
+            targetLabel,
+            targetLabelColor);
+
+        _userInterface.TrySetUiState(uid, AccessOverriderUiKey.Key, newState);
+    }
+
+    private List<string> ConvertAccessHashSetsToList(List<HashSet<string>> accessHashsets)
+    {
+        List<string> accessList = new List<string>();
+
+        if (accessHashsets != null && accessHashsets.Any())
+        {
+            foreach (HashSet<string> hashSet in accessHashsets)
+            {
+                foreach (string hash in hashSet.ToArray())
+                {
+                    accessList.Add(hash);
+                }
+            }
+        }
+
+        return accessList;
+    }
+
+    private List<HashSet<string>> ConvertAccessListToHashSet(List<string> accessList)
+    {
+        List<HashSet<string>> accessHashsets = new List<HashSet<string>>();
+
+        if (accessList != null && accessList.Any())
+        {
+            foreach (string access in accessList)
+            {
+                accessHashsets.Add(new HashSet<string>() { access });
+            }
+        }
+
+        return accessHashsets;
+    }
+
+    /// <summary>
+    /// Called whenever an access button is pressed, adding or removing that access requirement from the target access reader.
+    /// </summary>
+    private void TryWriteToTargetAccessReaderId(EntityUid uid,
+        List<string> newAccessList,
+        EntityUid player,
+        AccessOverriderComponent? component = null)
+    {
+        if (!Resolve(uid, ref component) || component.TargetAccessReaderId is not { Valid: true })
+            return;
+
+        if (!PrivilegedIdIsAuthorized(uid, component))
+            return;
+
+        if (!_interactionSystem.InRangeUnobstructed(uid, component.TargetAccessReaderId))
+        {
+            _popupSystem.PopupEntity(Loc.GetString("access-overrider-out-of-range"), player, player);
+
+            return;
+        }
+
+        if (newAccessList.Count > 0 && !newAccessList.TrueForAll(x => component.AccessLevels.Contains(x)))
+        {
+            _sawmill.Warning($"User {ToPrettyString(uid)} tried to write unknown access tag.");
+            return;
+        }
+
+        TryComp(component.TargetAccessReaderId, out AccessReaderComponent? accessReader);
+
+        if (accessReader == null)
+            return;
+
+        var oldTags = ConvertAccessHashSetsToList(accessReader.AccessLists);
+        var privilegedId = component.PrivilegedIdSlot.Item;
+
+        if (oldTags.SequenceEqual(newAccessList))
+            return;
+
+        var difference = newAccessList.Union(oldTags).Except(newAccessList.Intersect(oldTags)).ToHashSet();
+        var privilegedPerms = _accessReader.FindAccessTags(privilegedId!.Value).ToHashSet();
+
+        if (!difference.IsSubsetOf(privilegedPerms))
+        {
+            _sawmill.Warning($"User {ToPrettyString(uid)} tried to modify permissions they could not give/take!");
+
+            return;
+        }
+
+        if (!oldTags.ToHashSet().IsSubsetOf(privilegedPerms))
+        {
+            _sawmill.Warning($"User {ToPrettyString(uid)} tried to modify permissions when they do not have sufficient access!");
+            _popupSystem.PopupEntity(Loc.GetString("access-overrider-cannot-modify-access"), player, player);
+            _audioSystem.PlayPvs(component.DenialSound, uid);
+
+            return;
+        }
+
+        var addedTags = newAccessList.Except(oldTags).Select(tag => "+" + tag).ToList();
+        var removedTags = oldTags.Except(newAccessList).Select(tag => "-" + tag).ToList();
+
+        _adminLogger.Add(LogType.Action, LogImpact.Medium,
+            $"{ToPrettyString(player):player} has modified {ToPrettyString(component.TargetAccessReaderId):entity} with the following allowed access level holders: [{string.Join(", ", addedTags.Union(removedTags))}] [{string.Join(", ", newAccessList)}]");
+
+        accessReader.AccessLists = ConvertAccessListToHashSet(newAccessList);
+        Dirty(accessReader);
+    }
+
+    /// <summary>
+    /// Returns true if there is an ID in <see cref="AccessOverriderComponent.PrivilegedIdSlot"/> and said ID satisfies the requirements of <see cref="AccessReaderComponent"/>.
+    /// </summary>
+    /// <remarks>
+    /// Other code relies on the fact this returns false if privileged Id is null. Don't break that invariant.
+    /// </remarks>
+    private bool PrivilegedIdIsAuthorized(EntityUid uid, AccessOverriderComponent? component = null)
+    {
+        if (!Resolve(uid, ref component))
+            return true;
+
+        if (!EntityManager.TryGetComponent<AccessReaderComponent>(uid, out var reader))
+            return true;
+
+        var privilegedId = component.PrivilegedIdSlot.Item;
+        return privilegedId != null && _accessReader.IsAllowed(privilegedId.Value, reader);
+    }
+}
diff --git a/Content.Shared/Access/Components/AccessOverriderComponent.cs b/Content.Shared/Access/Components/AccessOverriderComponent.cs
new file mode 100644
index 0000000000..044ce23497
--- /dev/null
+++ b/Content.Shared/Access/Components/AccessOverriderComponent.cs
@@ -0,0 +1,80 @@
+using Content.Shared.Access.Systems;
+using Content.Shared.Containers.ItemSlots;
+using Robust.Shared.Audio;
+using Robust.Shared.GameStates;
+using Robust.Shared.Serialization;
+using Robust.Shared.Serialization.TypeSerializers.Implementations.Custom.Prototype.List;
+
+namespace Content.Shared.Access.Components;
+
+[RegisterComponent, NetworkedComponent]
+[Access(typeof(SharedAccessOverriderSystem))]
+public sealed class AccessOverriderComponent : Component
+{
+    public static string PrivilegedIdCardSlotId = "AccessOverrider-privilegedId";
+
+    [DataField("privilegedIdSlot")]
+    public ItemSlot PrivilegedIdSlot = new();
+
+    [ViewVariables(VVAccess.ReadWrite)]
+    [DataField("denialSound")]
+    public SoundSpecifier? DenialSound;
+
+    public EntityUid TargetAccessReaderId = new();
+
+    [Serializable, NetSerializable]
+    public sealed class WriteToTargetAccessReaderIdMessage : BoundUserInterfaceMessage
+    {
+        public readonly List<string> AccessList;
+
+        public WriteToTargetAccessReaderIdMessage(List<string> accessList)
+        {
+            AccessList = accessList;
+        }
+    }
+
+    [DataField("accessLevels", customTypeSerializer: typeof(PrototypeIdListSerializer<AccessLevelPrototype>))]
+    public List<string> AccessLevels = new();
+
+    [ViewVariables(VVAccess.ReadWrite)]
+    [DataField("doAfter")]
+    public float DoAfterTime = 0f;
+
+    [Serializable, NetSerializable]
+    public sealed class AccessOverriderBoundUserInterfaceState : BoundUserInterfaceState
+    {
+        public readonly string TargetLabel;
+        public readonly Color TargetLabelColor;
+        public readonly string PrivilegedIdName;
+        public readonly bool IsPrivilegedIdPresent;
+        public readonly bool IsPrivilegedIdAuthorized;
+        public readonly string[]? TargetAccessReaderIdAccessList;
+        public readonly string[]? AllowedModifyAccessList;
+        public readonly string[]? MissingPrivilegesList;
+
+        public AccessOverriderBoundUserInterfaceState(bool isPrivilegedIdPresent,
+            bool isPrivilegedIdAuthorized,
+            string[]? targetAccessReaderIdAccessList,
+            string[]? allowedModifyAccessList,
+            string[]? missingPrivilegesList,
+            string privilegedIdName,
+            string targetLabel,
+            Color targetLabelColor)
+        {
+            IsPrivilegedIdPresent = isPrivilegedIdPresent;
+            IsPrivilegedIdAuthorized = isPrivilegedIdAuthorized;
+            TargetAccessReaderIdAccessList = targetAccessReaderIdAccessList;
+            AllowedModifyAccessList = allowedModifyAccessList;
+            MissingPrivilegesList = missingPrivilegesList;
+            PrivilegedIdName = privilegedIdName;
+            TargetLabel = targetLabel;
+            TargetLabelColor = targetLabelColor;
+        }
+    }
+
+    [Serializable, NetSerializable]
+    public enum AccessOverriderUiKey : byte
+    {
+        Key,
+    }
+}
diff --git a/Content.Shared/Access/Systems/SharedAccessOverriderSystem.cs b/Content.Shared/Access/Systems/SharedAccessOverriderSystem.cs
new file mode 100644
index 0000000000..11ec9adec8
--- /dev/null
+++ b/Content.Shared/Access/Systems/SharedAccessOverriderSystem.cs
@@ -0,0 +1,72 @@
+using Content.Shared.Access.Components;
+using Content.Shared.Containers.ItemSlots;
+using Content.Shared.DoAfter;
+using JetBrains.Annotations;
+using Robust.Shared.GameStates;
+using Robust.Shared.Serialization;
+
+namespace Content.Shared.Access.Systems
+{
+    [UsedImplicitly]
+    public abstract class SharedAccessOverriderSystem : EntitySystem
+    {
+        [Dependency] private readonly ItemSlotsSystem _itemSlotsSystem = default!;
+        [Dependency] private readonly ILogManager _log = default!;
+
+        public const string Sawmill = "accessoverrider";
+        protected ISawmill _sawmill = default!;
+
+        public override void Initialize()
+        {
+            base.Initialize();
+            _sawmill = _log.GetSawmill(Sawmill);
+
+            SubscribeLocalEvent<AccessOverriderComponent, ComponentInit>(OnComponentInit);
+            SubscribeLocalEvent<AccessOverriderComponent, ComponentRemove>(OnComponentRemove);
+            SubscribeLocalEvent<AccessOverriderComponent, ComponentGetState>(OnGetState);
+            SubscribeLocalEvent<AccessOverriderComponent, ComponentHandleState>(OnHandleState);
+        }
+
+        private void OnHandleState(EntityUid uid, AccessOverriderComponent component, ref ComponentHandleState args)
+        {
+            if (args.Current is not AccessOverriderComponentState state) return;
+            component.AccessLevels = state.AccessLevels;
+        }
+
+        private void OnGetState(EntityUid uid, AccessOverriderComponent component, ref ComponentGetState args)
+        {
+            args.State = new AccessOverriderComponentState(component.AccessLevels);
+        }
+
+        private void OnComponentInit(EntityUid uid, AccessOverriderComponent component, ComponentInit args)
+        {
+            _itemSlotsSystem.AddItemSlot(uid, AccessOverriderComponent.PrivilegedIdCardSlotId, component.PrivilegedIdSlot);
+        }
+
+        private void OnComponentRemove(EntityUid uid, AccessOverriderComponent component, ComponentRemove args)
+        {
+            _itemSlotsSystem.RemoveItemSlot(uid, component.PrivilegedIdSlot);
+        }
+
+        [Serializable, NetSerializable]
+        private sealed class AccessOverriderComponentState : ComponentState
+        {
+            public List<string> AccessLevels;
+
+            public AccessOverriderComponentState(List<string> accessLevels)
+            {
+                AccessLevels = accessLevels;
+            }
+        }
+
+        [Serializable, NetSerializable]
+        public sealed class AccessOverriderDoAfterEvent : DoAfterEvent
+        {
+            public AccessOverriderDoAfterEvent()
+            {
+            }
+
+            public override DoAfterEvent Clone() => this;
+        }
+    }
+}
diff --git a/Resources/Locale/en-US/access/systems/access-overrider-system.ftl b/Resources/Locale/en-US/access/systems/access-overrider-system.ftl
new file mode 100644
index 0000000000..6901d41246
--- /dev/null
+++ b/Resources/Locale/en-US/access/systems/access-overrider-system.ftl
@@ -0,0 +1,9 @@
+access-overrider-window-privileged-id = Privileged ID:
+access-overrider-window-eject-button = Eject
+access-overrider-window-insert-button = Insert
+access-overrider-window-target-label = Connected device:
+access-overrider-window-no-target = No connected device
+access-overrider-window-missing-privileges = Access to this device cannot be modified. The inserted ID is missing the following privileges:
+access-overrider-cannot-modify-access = You do not have sufficient privileges to modify this device!
+access-overrider-out-of-range = The connected device is too far away
+
diff --git a/Resources/Prototypes/Catalog/Fills/Lockers/heads.yml b/Resources/Prototypes/Catalog/Fills/Lockers/heads.yml
index e46eda0092..1a4eae885e 100644
--- a/Resources/Prototypes/Catalog/Fills/Lockers/heads.yml
+++ b/Resources/Prototypes/Catalog/Fills/Lockers/heads.yml
@@ -117,6 +117,7 @@
       - id: BoxEncryptionKeyService
       - id: ClothingBackpackIan
         prob: 0.5
+      - id: AccessConfigurator
 
 - type: entity
   id: LockerChiefEngineerFilledHardsuit
@@ -142,6 +143,7 @@
       - id: JetpackVoidFilled
       - id: ClothingHeadsetAltEngineering
       - id: BoxEncryptionKeyEngineering
+      - id: AccessConfigurator
 
 - type: entity
   id: LockerChiefEngineerFilled
@@ -161,6 +163,7 @@
       - id: RubberStampCE
       - id: ClothingHeadsetAltEngineering
       - id: BoxEncryptionKeyEngineering
+      - id: AccessConfigurator
 
 - type: entity
   id: LockerChiefMedicalOfficerFilledHardsuit
diff --git a/Resources/Prototypes/Entities/Objects/Tools/access_configurator.yml b/Resources/Prototypes/Entities/Objects/Tools/access_configurator.yml
new file mode 100644
index 0000000000..c8b05c6959
--- /dev/null
+++ b/Resources/Prototypes/Entities/Objects/Tools/access_configurator.yml
@@ -0,0 +1,74 @@
+- type: entity
+  parent: BaseItem
+  id: AccessConfigurator
+  name: access configurator
+  description: Used to modify the access level requirements for airlocks and other lockable devices.
+  components:
+    - type: EmitSoundOnLand
+      sound:
+        path: /Audio/Items/multitool_drop.ogg
+    - type: Sprite
+      sprite: Objects/Tools/access_configurator.rsi
+      state: icon
+    - type: Item
+      size: 5
+    - type: Clothing
+      sprite: Objects/Tools/access_configurator.rsi
+      quickEquip: false
+      slots:
+        - Belt
+    - type: AccessOverrider
+      accessLevels:
+      - Armory
+      - Atmospherics
+      - Bar
+      - Brig
+      - Detective
+      - Captain
+      - Cargo
+      - Chapel
+      - Chemistry
+      - ChiefEngineer
+      - ChiefMedicalOfficer
+      - Command
+      - Engineering
+      - External
+      - HeadOfPersonnel
+      - HeadOfSecurity
+      - Hydroponics
+      - Janitor
+      - Kitchen
+      - Maintenance
+      - Medical
+      - Quartermaster
+      - Research
+      - ResearchDirector
+      - Salvage
+      - Security
+      - Service
+      - Theatre
+      privilegedIdSlot:
+        name: id-card-console-privileged-id
+        ejectSound: /Audio/Machines/id_swipe.ogg
+        insertSound: /Audio/Weapons/Guns/MagIn/batrifle_magin.ogg
+        ejectOnBreak: true
+        swap: false
+        whitelist:
+          components:
+          - IdCard
+      denialSound:
+        path: /Audio/Machines/custom_deny.ogg
+      doAfter: 0.5
+    - type: UserInterface
+      interfaces:
+        - key: enum.AccessOverriderUiKey.Key
+          type: AccessOverriderBoundUserInterface        
+    - type: ActivatableUI  
+      key: enum.AccessOverriderUiKey.Key
+      requireHands: true      
+      closeOnHandDeselect: false  
+      singleUser: true      
+    - type: ItemSlots
+    - type: ContainerContainer
+      containers:
+        AccessOverrider-privilegedId: !type:ContainerSlot
diff --git a/Resources/Prototypes/Entities/Structures/Doors/Airlocks/base_structureairlocks.yml b/Resources/Prototypes/Entities/Structures/Doors/Airlocks/base_structureairlocks.yml
index 94d3b15df6..e10e96f34e 100644
--- a/Resources/Prototypes/Entities/Structures/Doors/Airlocks/base_structureairlocks.yml
+++ b/Resources/Prototypes/Entities/Structures/Doors/Airlocks/base_structureairlocks.yml
@@ -128,6 +128,7 @@
     mode: NoSprite
   - type: PaintableAirlock
     group: Standard
+  - type: AccessReader
   - type: StaticPrice
     price: 150
   placement:
diff --git a/Resources/Textures/Objects/Tools/access_configurator.rsi/equipped-BELT.png b/Resources/Textures/Objects/Tools/access_configurator.rsi/equipped-BELT.png
new file mode 100644
index 0000000000000000000000000000000000000000..dfa1aeb1b4026ae17ddfbb5305aacf84bbeb9182
GIT binary patch
literal 1422
zcmV;91#$X`P)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF0009!dQ@0+Qek%>
zaB^>EX>4U6ba`-PAZ2)IW&i+q+U=HGmgFW3hTmC5mVhLL#Bwl~b7luwetxja-Bmr4
zbf3vn(xz--fhD0&#udh&KW6v?2gk@Esd+9rM;xi7!WA8l=TY{RV%pbzq-zNGPx^2V
zFjN95=dIOieuZA&9(eem<5?g48ezW-(QSAivOKSTe;*|DeCp|nB$RP>a&dbf>Twxr
zkC6TCOm|q<a&aG?6oxEyg(G1eLK64Y&j@6lA{Em2Rru6aQQ-i=@-T*kJT31bV|<^W
zrzAgm;Whhr?<M(MFTK3vGG94D=cfatFM7G%@O#H{N5szqr9Di2O!A!F=N#wiYRbrH
zzA9=bn;vE`@j%LDKbFx9r=oAW6*P}EHX!e@#RIKTAqJHhC{d?Mlg5^f8bVAw*dUo3
z%htIV7j9rgl2)V1CPg|3vNRq6K$Gwt3vIt;`)lOz+zC^eV2tp{FI)J#!LPJ1XIm+v
z=y$FV7q7ZT7>nGxVithVytwI3@S|P$<GcDnse+*HG&>ep<8hiel-_DfHfO;+g*;y&
z3f3<JND+K1f*}Ecm`Ri}MPoK1<k11BB660*2MCZVcLd2vBy%u!UcT{+(Vol7nU@-S
z6F{hBF|a980V^d%{aA9;P*u^Ss##4vXwjM_r>r?=%WIRXCYDSso0(g&>f*`OvzxmY
zuZ4?X57d&26)&aK%Avwhg{_MD6`F$&Intp=KJ4(L9JQf*T58&Iv*xX|+PO=|Hqmpp
z?!ELnC=BcrBMlvS*zi$Cov5`bGfka&+Vojwy{TPPKeR7Uql+4EQfr>w)SwM!4->Su
z6J5+ej1z&lEdnTLUd*CXO1#J|X0fbYP8mV!ViP(oVnCP%u}-?#y^;GAx1jzhZv0Q=
z!b10NkPATfk=swG_4S==o7njluAD}}+lTStHL%z9QLDczzYYDT4ULA)UFO_>bmly=
zt^OfuRFta*E216Mo3L#vk3mWC!wY+M;%8;}>H{C7=`muNVHO)Z$QA2~l<__zwkkRI
ziO*}Rqi|eH<m%<@;D5lY48I!qs{A(eZRp$3x1s;7A$&jZ*X1uhRIXYTspbs;00D(*
zLqkwWLqi~Na&Km7Y-Iodc$|HaJ4nM&6o&t%6^m3l*g?c0Lv^y?3vrYx7QsSkE41oh
za?=+yX-HCB90k{cgOA0kgNw7S4z7YA_yBQraZ+@V63<NvEn+-yxgY;M|IfYW0z$LO
zR5LIRsG4P@6LB$@Uln^_5kvq!Odu>VQ%`0Vv+%61d+MaRi}5V)zCWv9DVPlKiNteE
zH!R`};+aiL=e$oGVP#1nJ|`YC=z_$LT$f#b<6LrB;F%F4o1Q0*5R0WQmb;jh4V8GB
zII5@`<qJ8N70z3n)oPu!@5x^nDrhSiuG1Pu0!v6D1rajpsGtf9G1@g!Or+^N?%^MD
z{3&wD<f?#?V*xd&kQ_hwAN-!JS)7`5lR|Nz=f$=^Mu6U3pw+PL?_=9;odEu4;7aTG
zYfWJGlk`SMiyi^tZQ$a%qse=~<qk0Tq)Ue6NPb#Eu?W1M(KqFRfm@(&&7E8O9H$RJ
zmS(kl0~{Ozqb15-_jq@(dv5>swCDE&QXF!c3zMfR00006VoOIv0QCU%0QCn?)A|4a
z010qNS#tmY3ljhU3ljkVnw%H_000McNliru=LiG=G!{0yah(7F07FScK~#9!?b1;R
z03Z|tz=z4~VJAbHLhwT~2!1HuB^cWx00000U|TJDzM4J#KHiZ6+UVf{0000000000
c003~61*1R(1QhhWl>h($07*qoM6N<$f|i(ulmGw#

literal 0
HcmV?d00001

diff --git a/Resources/Textures/Objects/Tools/access_configurator.rsi/icon.png b/Resources/Textures/Objects/Tools/access_configurator.rsi/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..62230b0b379ccfb4d00d0d56cea23e2c4b3331da
GIT binary patch
literal 7579
zcmbW5bx>T(v&R<+?h>4Z5P~JxCRl*QeS<}CTiiXkYw!dMEEY7lYtY~lEJ*NRi#seV
z3p{e~yZ861-uvs-sWUUxHRsfH*QdWd)sbqi<O%U;@c;k-p`wC}#{C=s0H6VIu<lph
zSAK;60BMQWYb{p|<M&LC&JN~Qwq{JOo{nZrW*%1N0D#9_S(=Ro3m;j?-7bYUW^3_d
z2Kmv5)=ozMc5AvYwDdq@#{fvn;<Gnz%*~YCul?`D4!|e{u3u&xZ_<n5Yz+%0aM|;Q
zEcY8iaYO%#tdxe!yN0!cbF+2fW0<`|q93^3MNiy-J$gB=#mk><`a1N$!SVMl+pmoM
zbFY^Qv3>K$@rP8_*B4T{&m6)<4ye))<P|v!{-?W@_No`{*ZUI8O3IDuADjx~QRfXy
za`AhD`9EA*ZwowL&V9;TDKAWkB8^`zK%DH|%mc&-+Pr}`7M*c7exj{W`E7a%z;@F0
z#p5%t^vjFh?b|`8%Lc(NT%@rGV%g=bn8mXBObwZO>${&e4Eia*yCwT4&-pggFDVUD
zcE>$lFW)@g7*Yj$439}Y=IRTjf4db8H5>)0gr%;<hQg^WRA#Eulx&?o=Ehfxbw#q)
z)%F{yfb8X^Ts~Alac6wz-P&n5-x~yKLRU-z<3xQMN0(4PzGr}*$#l->!gi8YEZs(U
zpSoP6)Ks&sW(qc;qfR^?l=**}mBHG;b1@5AjGJc-3o)!qDi>w@L7wSAf>&O8{Q!p)
z@eqrgjOK{;BPL;6x0V!BY!arM9HVAzFac&lBem%;hm|Yqv?XE_#Ht6Ei=^G>U66V7
z*ot$#Apcdh^TVCObtOVK#gDQw`3i0mc{UTJUy5a8*1Z&2sW^0$zUC(xXpX!op4PCj
zt817gqi2WcTGiD}d%I@Pxs^`|x4W2jC&)4KyC$m3)A?$MgH%6@43*Z5w5=-Pr)f10
z7MGN@1<&*L{LrmGsNS`20b1|peTt(O+xR*8%6~+s@%zQi8l5&iqO^xg)7`*xgjQak
zgC_+?j?F}v1<HrbZ}1d@!nGE5Me7`!EIjntq1Ty=CQr+L0WX<PBlUfRbC=D5pV@)3
zr;A2=V#8(Ou(0xCdq0fD4S0INWHW?Z_{Q%pozwG^ZLIIQ#hoe~2BS*+mU;s#>)?7e
zjIP`uO%>${2NC&@xsA4I9_ZF!{=O6U(zYvLEXJRUIE}SQX&i!)ZCX*4O^|yhG$lLO
zgo$?;KV)dB=N3L2gy}96=T+Dr%1lH~UsymH7e6XTSSLzN+blneEUjh3w6;yr<zd}Y
zjP|i9b$38s|FUP5Yvu|*QC4^rCyfuIU!#50Et1ewWYae&w0fqK%D(_ptxrdaB#pYV
zMN#iddezLnz=JJde?8(~Wu)xN5Z@bsgyQq64U88zx@a10YL>&eU)i$Tj0h<0Kd*@%
zWO7=sh+o#it(-Bff_NvEYYc!ab}$oL`m;aCMXfp$TJS<3rj{1P4h?nKtW*Q9$B3$%
z6uzqD^=N!O)w5CiQ26GURV^jbmOS^N%U1$+ms30ma|g|iFz$R9F3;MhpLAvoA>(Ri
zg#mRUlc~|{KX@lxLqhxc5VIjzZmWB^{qE*^0R(j)y`syAm5lmNy5Gb(s5yumv<Lve
zqY^P4lrPcL@}GJ|Hf6>utm(w8<tUnbY$DtiS1w$zv-MP6^i85K>Q}eP+(D1j&;4p>
zH>5C>MTy;LFH`+BM2SgJgO)>EQ0pwvjWt5CjWE-jww0|DI#&Yv-e}U)JB|OCWe1Ci
zWfUY2@neylrZ<SBWGOXOdlFE@22rwm<keSX{30TEMxQI%NsU%z!c&dcoC2(iu3iS;
z!;bHNLLbemBPa?Xd2vcBMma+NZr~^KSzYJRPI;#yZOF*SFJt`z&1GtHW6xf2RHd;=
zKlN4KOQd~~$vpMM1}VlS*x%F1upN}hKY+iy`x8Akw)$t7^Y5(c<>)!U>zwewxe0@G
z?nhWa_9V!9;M|tfzI3`VK44B}p152}!~z%F_~lMsH9zcqkrK1i!;>JQgBBNm?&s4)
zNx@c0tu51;+a8WgG8u`dpl;!}p+*r37I|l>a_fp1=a`+EB9aU3G{jU$!L>lSS7ogD
zxWUEp=yLq05sFAt*N8TfA99po&8M>Mb|v8*u~R9_i9|SZ#4o7m2;(@0qv(fHaj&wJ
z!BOVq&bd5h<-0ZIl}zh3g8{=&b$x6#14-#)Hd7U&xHO|yykIMW8yH<9-^(D5v}G<h
zXt^s*>)O`IR#MPto)H>*)J6b3iTYrCwxj264*pn@$`O;oR)pMxQ18@-ZzYEz`O?p9
zbklq5A{X(#$Mn;2T#!9pJeqA+F?VPhz6lv#a{hdc`?+<4A3@IVJ!E#kW_po4w4mBg
zz`YwkD?qy5_#o&DkqOPSgd{0x)x;{$FChmIimNjs8=X1<Cs*wbhuP_YSe-&+^!O!s
z*feJ*0NuEmGB9+wzJR+%jN!?aqtyVQLm!9N_>$;Vz}uiXYN^*dTT+9gfvffko>&yQ
zOPa+6dt4fhWAsd<6gDGsVqQUb%1;O>Q(}IwIwlA~Jvf~3#ADc7KTk-`P2j(+d^|!4
zrzJ;Yu+SGF(cQ5a*{ZQ}XQ25=l%&O11a<lhOQkrkiomrNl%QZ)JR1}D)4BV#79dOU
zW(nuK+1b&Uspz;#o<yp@$NRDf%SQMNh@6e@?%<%^!(`9vNWeAufJgqU=sLfrCuZ#l
zKwd4I+(!S0=m1sTmpZ;Vx;Oeo#%X49AK^J(31=^3-TfgGheC5Vfq7Z#XFOr`&c`3=
zEfRyD>#F?}sY(y93lUAJo>UZQ?Tg9!iLQAWW!>W^#Q$n5`OEX0`lzX3Mk2FZhV9dz
zW|Jn)ZZftD$6slRcCl+4-@T@b>d1Kz34U6E=`NtkOz1J$FE4=Sxx%PKZp_Y59e5id
zV5HM%>lt=LE*nM2*uo!wHqig{IfzM&p+G&ZYHs@s%gx(CtUk;%?-52Y?%wt6ba9oy
zSm4p`LXo83k`rVpy0cil0mr46&k44=<~&(2(spvf9Ym>QEi!A1+34*w9{1DpYx}7e
zU&m-}zo6g_U@6>At@}-gq92Cn7x)M~1lf5lbnFMHD@3QA3cqR~jHh-Q`ek(~eTF@b
zZ=&ee3zZ5E;b(t4YRfTQdXPz%v_?!s?1Ih43*ObG2qaA_6AFERD8(p3gXgXbiNrAL
zUFpxPAfyPS1lOb3M|P<R-Rd-TBU&;<`?|MH5^`d=B$@JrdfSxs$?^IEAqVWEW!-2r
z)X>?^UQ$lpNXHcQ=<8@`n>616DE5k|r*Twh^CiWaxN|g-Qh}bxSSoE>6MLAE!|;YI
zZ{AV&vUk|^P{DDIMI!=|YxiVRFs7wq-4pNfVpzU{G%eu;TuCm4$NX&6)buO%Oj&50
zcOMf%>uP}TZVV*8IVq;P#V&#I+oW<wV}Ol!If91Z3}!vF)i)hm7IU?_^4)#6emqUv
zKoejaJ1ok)Ai@7zrd_S!_b^ufn4ar_(ZusitKXoj)rm?eFom4g>R|Mip^zk9^A~C7
zBe0_UjiZf1Y$;_v8?;zt0UdLNz*OUcieoHCoiX85L(!{@GIw{KnX56XB8Rz)95O)n
z!U|^<S46~GW???^h>6okZKr^0SExQyg|)-Uwaj<gJ$T2X)aLt)mN9Hjc4~axR?e;>
zL%l}ZW*mw)wNAUhH%ID4V*JVy+McN%yc=l6O1Ht$ENJ!-*Q=jTEgu=`x>&OzuK149
zX1LW%T9`tddNZ2hLF+ctrsX&lPEmsxeQ_i#8I9!OMNnFgtx-8X|5qo;msFfo)+1EA
zjOSJ5@4F`|xU3@c%3iS4q{ka{P<J1jiM-D`5)MQvaXe%QK|9klg$UVvAt~UPT4Q#P
zXD*^+<th5SUB)mc_We_BlWYF7HdS4f%)M|A!{;cFViV$N-A3Svc%n^bK9d9SbF5<x
zq7hYzDJ+UgF%m_;J-1JbDf1_C=<!$+YrW{#&+w@sNoHKZ9;HTk7S0j3hv=>|ifD4M
z>IL|ENWE6X*JF=o=K~tWH5rB2Twi%vmiWS#g3GMJ5(|XYq@HhyX-yEB%Qf;?B{OC$
zerOvH*H$EZg)P4MLM>+{JMg2eZgjdaa593`DQi-Z&Hbc4UJ3Blm6YBK)LDCC*UPWN
zx-tRPzQRP&p;vpgY;SeLO^X>9deG;lr)5W#X0h0;7pryJ)8;2x*q3dXL+z*3zbmKJ
zeYeLyP54l(s<h}U-z>^`Zh*?~(Nie-C8>*gB-(irNyfuKsmzu2+_Cn_;V*a2M<KkA
zSs*@H&mvntmU~<HLbRM`q#ii>uwn47^0759p=`&eZw89tiU>Ly<)g@V;dP6u-;nce
z@`xGyxWj3NMMECZ+qQ#<AGb^V<LMgx?~YKu3H`nfNn2Ns61;1a&hUl&dm+^ubrki&
z`l6$FuY$L~$q{4m<z|-x)Z)#9xTU!3V_xvBuLbNsp=Md*(&5sJ_#v%ISS)I4K}I3K
z8$0$&j6Ysfl@~9tRM46*nV%RVCca~AhtHVphKWX$a_qG8gdlu=zJ$vsGKDu<#(_a(
zMVhp*zCH+3uM5EQOQww*e65sH`Q7N?tPaM`>l}n)6JTd$(ca`7R^Y*2hXWO5e)^`!
zWR4elcV{hBuV(UWm#w+#%6xGo50NG~o25;paZ`%g5xjjGP_KhcdJ-hhCf7w$r>a@J
z8Sm7|n%)#HWX)ZFUa&YA>?zsBlptVDcSp1tJMQkmSW@OLoia<SwTe_i2n{`4@s^h7
z$c*xr$~;O)`e3Kes#n?*etSh=Kq@J&!t|j`ldR0<#qn$Q=`q8KeZ9p*z=YaE;TMru
z1+=jgh1b8*zFe5u?Dlmo%BysKOw{jo_o30OW6&9pabOCdFkxuCC~U6Sb&PrWnT}>S
zn0zm#Hz;#||I!2=7rXNzBg7CNNx`V6u+~7?>s*$}+p)<w`EEQ#5^7`>VZHnO%#KkD
zfBvz-Vm<6xZGraJT;-Vun$2v9h0=W%*;4g+8m<DmPDhkel(rdYs1zFdP$643W4Qf1
z$rr^3c*bos$$+?&xCyo?Cz>ak>qGS*Zf)yUdhYJX`5km7S%P1JOd@`(0F_I@Vf5KX
zeiPxgLL)?p!gQ3gZu(YgY%H^bX1+|j;tlL_;pJwHojJuk^v6}S^TInJc#e#B;TTL(
zz_1n?wO89`1qyh@GyYoTc}64&KxCkHQVR!Tjq%K?zkd)KR_kD~9%WC<fV^{^xgIEJ
z82Dk{qFo;+b1J4IO4g;>&h<Mv%1)AjbMd0h&hW12Yn`(lSQ<3rB^_Q|8!2ewv;~=e
zH^NSw4RaC`UqKssG^SI*;CCltO#NwEkjxdoV}PJqvv+|%E;v%7WuaOYKhSJh4~KwL
z|4B(4jrHP1CgTV32j_A^38wiNmE7M#S-2PGr=a9bPkm_kf;zLwP83#>foJkE!INkM
zTxo1T?EHKTf)cwG;I7dqLjJMtfPtJ-dO}x~S+F$D*)0`_wfd%eHACG<O(moc%adzA
z3<B^H%JCXgXehq!a68a2gVI}`DQkKNU?3JbMAHMW4=6H6I(*;bjhe6A3We6T24aO0
zGxMi{!gGj~t)zkHwvaxDK7ufx^62BdqGmtN6GvJNonu0>0^PZki1<5MEBOZDR3%%9
zAC?@Vha$Ufq#Lh%H?^!b()8g$%hJAnmiUYCwxh^rK8~6Qni(HBzQ6%8Y$TXx*5_(S
z<~GgB@qN%WfBP>g3m_lNJHHXg|7UC<KqM?%4o)jQ`S9psiNMf^W1ft)_HCCF`?POD
zx?kI=w_-hM*&sJW@r=W18#nS$@W2wJAe;NxMJ8d|((*}s7AGD~vSxEr*8HvPzWrW(
z>{e9BsYo$LW3z%|Vti#i^w(UA9elj~Y~bxj>Brgmm7^TzH6+jK#~08ASwC|PH&WF|
zDg{SbEw}MeC)<B##QE~BVteWEwd-U$d!X$Jc&UDx$7;{+IO6kz0;`wGJ!`w9n<MLc
zj0a6~(FHIP`}&#u{!3?J!E(qj$ha!UOGZ_`qHkl4#y5EiJNhWP5tYxE13_8%R$m=<
zfss!>O=kIg`YJ&L7`*|`HJdyhhNBMedpMz1($Z>*($fF5ZSI>jFyDli3g6Wz!tM$v
zqh5>5N_I0#yH&5?J0)^H?3A+Ns@*Yio}_wirJ$il|6nF4IIgESII5<cs62@265!<K
zq~V%CHVVOeW+Lj?1iTZw8*PQ7OVtd%2JsRVrJ3cCJMpC$QhFPb$^h=w<td-0s`<m3
zqtXiRoxJ9#<EMvh;1WZQRDz?(ZWk57r>lgkpCQWdZ>sdhW{S+>Y>c3-pzb)m6n(!n
zJ!h?z&!jBrnQXBnQTg1-EvZR_NgioJ#YMCm_`)faKXhSJ)){q&1BTR`mRvODleBW^
z$_kGjkn-;oW#i%V&Arf2$=en^_ziSMaX1gG7Y8Ij(OwkA(}OR8sLV2LSeol6DW`0B
zPd!*JU`aoFs&fAjI&Yr=xV2bO+P$=a7+riilar5PMEh;Gvf7+G;N7u7#Cw^i9Ja3D
zrz2H`^DS#!a3e5KH``$(L-(4#kXRzwyv_%Mo*q4yb<hCe@xIdA{_dg{j=<2McTU6q
zRLFVXPQx-$mX`sX|9P-gCz1CSTt@|M7XSdC{LhO9NP|(|8?jv#A+p$T985G2i2oME
zaKCLuQAYB$$J~C#eiZ#VS|9jYsKw>ie9N3(%o{q^-c$><$cR}vD_KK@ob1<?6gr_&
zbMLH6By}kh6@W5Z=@UA5vg{*K8XUgrIb-i~6iZbLo1TAp(xiN_;61zd;{fIEZjM|%
zdoCOD**CQ%{SXek+#_nA&uCe@rXi8SVGj9gi0JHO0}^f+>fYLd4FhxqBN-*Ga<8ww
z04N{9aeO9!SAX%?t(N6)0w_mg#+KLSuHUg9^8DO(Z!rbY*thc0-R@e()2!1awfo=p
z^PIJ{l;a7$5j0i_&wv`5ikzh$fnc^%O{TUmh-B<C!`;g}zl=aV%&Y6&I20}kCYpDz
zz{!Mn7!;)Zy5vnXpR33N6v(Z-eK;4?q1rXIdiUeTKTw1h&+ug<SRIUYWVB2!D0?9<
z4oEh0`sU6EwM~XSoUEgT=Dz9THT5%2_HNMoUWHoW?yx>S1bfiItxtvaAD-e~gZ=Ib
zp_eSnnCAR6K};Q|qRvh9<WrmmL(Ei{5?ElID&^2XeZc*xM*BR`k`hSqLJ4{_a3^iY
ztX~ej&(V*wS{~c>!e|AYAVz^#fTz<bl|f{^v$YK2W2fv7qZ-Sj-f*s6i!Y-2VGk}F
z`ma|2O4LkeE-~8<q1q3B*}89R=DjVc^7df~T>!LWY#f$=Ptb5cjuT%s%idZw%wtLh
z*v-G@q*Tf$J8Xue9jtH%pl;6Zz08DHxtUVTxK-KFK?!Q$@P1SN%fQk6&!Q~T|GlRT
zyK=~E(^-w3;?l^PY=-(n=p*>1#eiAO@Tz9LQiqWr!TMnZ7>UN7)Fi68QoyBu&}PeH
z;Tx>a?eeB=c)ZDqn^pA*sIfiduXAIp)aqd7GBZr(sL>lIbLC*9cezBzycr1BmO}j<
zpE$SIh<(=5SyuY@SI`1m?aQ`NjT+@A7!?ryG5@gstWv{&xcZkcndUKZL*D=y;%w9o
zMn91B98Kfk9gu0`cGfq*Z+~(_bsE@0+@V7LFeQ7+WCnN;)vB5T*7h&;^dP}pI6-AR
z6<|<mdirXpv-&CbQX#SVqnoO%9jtzb6=b1<!cSGAC7*R1@61+X2y(_2Xmkf^sQT&7
z*ZX(}kw(b<d?)p!U+v~+`igtDcDOkPG#Ux8I$1^yz0|UNj{6b|ytV4ph6J3H5Hq#^
zJ%R7f2u{Vw_PsaH!SC&VXUV_bgpfRvwalszm-vFM=68;^9v6WGa3D&E<DKt+@b|)h
zJ-s99Vw;X9yrkh|lSSSH+-`7ddQ(NzF(}^J1eiSR{MF!j6Zrl6a^KK$4cHwRFc`L>
z+rNNSk1~0wKiUUe6*suOz06(4@TpZ@Ms!0O{UrLVR()MvG<5Zh5SQ)-3|-=xzl3oD
z&4V?u4X`SdueQ@S;<n;^0OGBxhOkWL({b@dPORrDHkQ|y4ya?lrL0Wm$@5AjS(JUp
zFbU#HPYeydGG}40KY8zh3DUuLuVl~H-q6IaV0WyX?|j90sqwyjk2bN{ej~WNI@Mrs
z-JLc1_1_rXd-|_@{2Lf#<i*tv#$zwQ#yg<IZA8)kjL2Q{76z}5865w8{+ud_BNFwi
z|5ht5?ht;ud;NR);>d0NDHk936#{f|_5J+N^8#zr<Z?z9xYCWd3*nRV4XC|9E4qYv
zoUy+Xt>a4a1#pU|6WasrfkrR(*BV6qu^HBmjm0v2(VH`7eZ%gtnyQZLL!uWFWuSvi
zQ5`am{62WPi?)HP5UPBt`5KW^77>fsTQlOV@4%C6D;dx|ALsWbw>&p16Ee&GJpaw*
zOz<+Kk$5cX9^J(2DQtx%LtnsE=)dm%gGI!s?6uE18ktzYABg;Ae*U%d{*!wcSMm`A
zedftUZ%e45TdsJQ7CR?w<JenfS&TCd(IX!xO`6|AZEKaN!-k2SvhFPjhc{PW5bfJv
z>1JT<JiY)Jx0YvEQyfAxPLI1!rtZU<ke2iThDT;!tl=_*BSrsslyxP`2RW6A1pEcp
z;=V);(FoSOpEnP_^g<sM9?ge*vVvdPQ|`%!L7H33S6keFWrTwBpAeSsnh-hx9ik!g
zPB>z5CRObID*o&37<#p;4nI1(Xo_0fzo}MC&5E@pbdg*f|3}IcZnthTuK}$GlWWM5
zDbA=#kZBNLzP{>1AWHEJ?c-cuOL>&tJT){`49w>L(Kq1n#c`-qAaTJH@HR$&g?PXp
z75IDlUs4gW#r7xX;<wNe|3sVRi@3z#%??K1!o5Od`}z%D19r`TS?>O&eSQ93SwE(9
zb9`{U4H`d1A+CZYZ*P%MhJX!UufTzDgYB!U^Aon+xJ7K<Ui0~!n-GRzpzF4mUnzVB
zu>(GyRWG`<6>rqPHNHT5J0yPFTzFBvVbMZ%oaM0v<nj$c5To26NGJlWcC@1UylH;G
zRjgElw4IJulap}K|K#{if^Rgo?|tt{-vNeYR=Wr)-QO9a`iDKh{^=C<AHn-;A@PTe
ze^B|4yQLPjqxTXxj=}y%b>wCKgV-N%T!BUdR($#;d;&VG1k#&S<{PS-K&F%-r_FbF
z8zb_u@%Shi)L+$0yXMvhMs;+2y8G^8djzWj?3fy9;Xt!0?w53#?q(^FZA!do_%w-k
z1gosR2Bj+zEiSRH8qk9z!#`(@=CgfS3oJGagUnQ3!42ciQC?ST*YmO8b+O}Ike@m9
zW@0uDzY<q6UL0E??rYIqyDI!+MF-_f)f!^CAhF|Kqn1!&=V-5PFSB@k(U*jK*NF`o
zk$=oL_vT*UQhl}RDBJ~8dg)%~TK>Oj^e6McNC8K)EPE|yoo_b>EyISEjye0zNR)Q{
zY%WE3bzDk2@b*3hc8&j_p?Y6b_Wmj=R{$U6)wx|C^O@*}9+N%aX4C-E`v61bX3GI4
za^(Ez+GD7?-@JxPQ2wN_lz7a(!4qES;J7o!!I`A==#~km($0GXIfcD74*pvZdt^}c
zcF<_!3l#lll|Q0%1x`)VJI+eaVlDi?sJ>LW#WttOx%=IxcXWUK11QSAk|~!m3i>Zf
Cp}&Rz

literal 0
HcmV?d00001

diff --git a/Resources/Textures/Objects/Tools/access_configurator.rsi/inhand-left.png b/Resources/Textures/Objects/Tools/access_configurator.rsi/inhand-left.png
new file mode 100644
index 0000000000000000000000000000000000000000..7e17df650aee109cd9b506fec3dfbb85359955aa
GIT binary patch
literal 2401
zcmV-n37+<eP)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF000I&dQ@0+Qek%>
zaB^>EX>4U6ba`-PAZ2)IW&i+q+U;0vvg9ZZ{Ld-&2u4B(jsplq><#w#o5FtezNV*p
zV)oZ;m!oVyj3uEInW~refBx<1U-(eHS}LNg_F6A|N-v!TZrXK!`Z?#Tob&mV=Mnz?
zG@f1$2t$l3-+$_O<`0a^`wMSA^87rW+Vh0kV<^82pAU!UxVMi%Vw~>r{6v!azHe%8
z`Z3h`7+P;3xA$*(h4m~Kf2U6aiY%GH5fg3Be4TT<BjETl4_w<hGu@+ug(cyVSs!Ca
z$fxDKU9an7f<7hr?Jj-I{_E~b@@YKd{3Vz5$q{b;@IjU@<NR_%A06{6BKrKm`wQW3
zNp`p9zVFqIQjyX6RMbg!elvrK6DjBOTE(IG3hwnB{R$`JT7cZHbxj;A_e?;=Q!d%^
z$e#DPuDlRpp-qY_(IP%$jg>krV3fJUk)4z~8xSO3v=aa=Os`n-@!OBTl^Z-;##G8M
zmhs9DkMw5`|H_fvSEMLk?UgIUMN!uXBan+TW&x1w4{mZ2{B}I>UmxlRr3wV)q`6^%
z<C?dLDfzv&_~6W#C%E2QC?~bY08#|sf?zTOfvaYgT=S(wnltj)0MJ0>#Dyjh$RcD2
zk_vOBq|_*U;~mXsE(ukNVQ>?G5U#Airt<(;r3mUrOG6C}Y_TFDRa9D%E~9cSRcftT
zgXD&?78R|k+O+Fv+)9&Ho3_?^8=X3X1Etrlz4hM5pfuoUz}CS0fssj*XPGkV)Y)dA
zW1)OjS+eTV)mC4_$k;#=R!yy0x3P2DV2WL~?7DTg-S=?RnzI)dudd#_`*@-Dp!)6j
z3#jD>H9APeJbj^t(WLrjA_tvFU<SmfWFW4A01BD{v#aG&D3A-xt{yBWgdiobNtOdK
zKv;Gr@%+N>9l2k^ElK+&+~{Y>rGV~#fm{M~-*Ni`)GTyv9mMWk7&*Pzg9?4Ok*JLj
zwefeazYYDf4NYv1Wz0T{E^~8KJc^IKL6+7A)uPt0YYGZ{ui9n(>HIT&PVci^&RX3^
zLC4|_8Y#=8K8MR?+ctQExNq^jeOpGgqq=9UX0!R&I!p*VM}4o$48~B{x;f35fnjzT
zn@6){%4P0SEf;J;wOwU*-dETy&eM&3#Wt!Dz?#|YEDfRN-9@k|brZ)!>~r2&*KXab
zI<cy+S<K<FvNatbiW9v}Ua)L?CF=-{uy{tJagEW%q#y+yq1akt!v{pFNbuJ+PWmsN
zBOG?nU0gwBp6a;;VNC3F++o!XWZ}A}tR~xFv3a=N6{&~UyejALiUtpU>kg9Gi0IC1
zt?MK`*FXpPmBJtvu${F!tkQ_Ew3woAfjscZ(9pWE8sCz7MOrF2jXFF{P$3}6YuQ;%
zd9CJW*Yx8F=xD(1445}Sc13{Ndy9->Z9Nt=mJjMtf+dZGDzvtnF3CC_>6xVWS`9TN
zQH5t2O%&vcF!^c@V=EIVU2o4LtrBY}5<UFqt0GA-4bU@6BuptB>0VDvfM?YS9f71q
z$F=}KDZc&GiVvNlNRCt{I1((VdLi&Uis$w|Q3v04WBU91{<opuhW?)o?L8Nm1T+dt
zK%WnG2OZcUTF|+GO2*uT-)s1_*Ci-ExOadu4$*ULUPEix)XRW;gwA1OPjK!nA3KQD
zr%$PEPaO%yN9=z+`yYhC5Wt2uu%Hp-xf)tJC;{jIir48lL^l^_u(i)BlM#j`k5ECj
zh<Q=)tJdDykqvav->!HWk_+VuQ`eCI8?ciT-)j1-y2CtFD7Z|}fgb6BXv$m}S`G0o
zH|0aGz*7+;cpeS)(i9qRbq-_$Y7Q~hP;)&(`7Y*29TEm2W=C6aGbP%A2@_Zsh|*Gq
zf?Ap9l|%6m(=&(n+$KvT)N+bVbo@|#gpa0ULss!)W{U;@3)T~KJQR^Lq#gP4V0Y`e
zppTZ``6gFn?PrCQzC9S|2?X*ARbL^m%R+*3h<d+8y$F6;R0HhmYIYQ+Ux)~Z*AT9K
zAv82G(CW^Q>?omq*F5VjE%M{Y(&tEa{L>;LiB7}c#nAH;34YNa-bPvpb3QZ%=}TvD
zzkuIUf+k5Ie@`s@GtExduZsIW$WXx9fyRFUm@^|Mi2{Ff0004nX+uL$Nkc;*aB^>E
zX>4Tx0C=2zkvmAkP!xv$rWK1+I@m$PAwzYt;0tk-Di*;)X)CnqU~<zJG-*guTpR`0
zf`gC6s)LKOt`4q(Aou`rb#YR3krK~M3N2zhaJe7<J^#<W=K?~r%2YEj4yc-Cq!V#5
zmtPfoUlBwAK1?7iF;h=w7PIiIuY2mGx{L8F@4i2)Un!Uj@QK88OgAjz4dR(iOXs{#
z9ARZiAwDM_Gw6cEk6f2se&bwnSm2ovBb%Nlju4BbE|$BPl?|16nmDSc8s!T)mle)i
zoYiWbweQJa7%FHh8LrbBMgmJnA_WmL>ZqU!3o+U?QcR@jJnrEia{MWB$>gelkz)Zh
zsE`~#_#gb9ty!F!bdy4Hpy$Q5KSqGwU7*#l?eAmTZk+)BXW&Zf_-jpI_LKBRM~fZ-
z;cejJx}(W^z~v4w_@qmQ<Vb#6La_+EpV2qvfq`3~Z_S-s`y8haK$d2;d;=UD0;46$
zUiWx+uzPO*_O$2s15zAvnhTSsDgXcg24YJ`L;&>w^#Jt;Pt*DU000SaNLh0L01FcU
z01FcV0GgZ_00007bV*G`2j>U`0XGsF`{qXg009+AL_t(|+U?rCO2j}Ih2ayh_Ye09
z>_>!5WwBKdi>-1AX+t1Q+O#&p;%!)2h*(+J3E~CVZ0paeSMXU0s|c=Pq7!+aE|8gU
zK87@BBme*a004kMCgYKLCwqUco6441x9oe-hi{9_+9EUWWIqj6H`RyX4Kn=d)`pdN
z+BwJ|2M{X!SIRuK$#@ieC@Y~ie0q7->%%-bKA9_I_|3I-%^qj*pMpM)u6G*lKLG#$
z0000000030S=YM(-&x$pI|V6AlRm=lZtqBv&aN-Cw_oY#a2o78byL~Z`BVpKCP})v
zyVdFCeG=6P=%XHA<ejX{Q)`PX&cd|M@Slee<p6%G%8srw|BD`<djkLf0O;lolc#SF
T-H5_w00000NkvXXu0mjfXBBo_

literal 0
HcmV?d00001

diff --git a/Resources/Textures/Objects/Tools/access_configurator.rsi/inhand-right.png b/Resources/Textures/Objects/Tools/access_configurator.rsi/inhand-right.png
new file mode 100644
index 0000000000000000000000000000000000000000..4794468564012100b91f89fdb6fae4d81f02f725
GIT binary patch
literal 2363
zcmV-B3B>k^P)<h;3K|Lk000e1NJLTq002M$002M;1^@s6s%dfF000ISdQ@0+Qek%>
zaB^>EX>4U6ba`-PAZ2)IW&i+q+U;0TmK-Mx{O1%oLW2;3<4Azs%MEh;l$hSxUE3S4
z?ffLq({GwtpoORsCH1EL*PovLz^AZWsj~DoTD$P6qmH8Z(XYp6oO{0Nxt~wHhw%5i
z{`4Fu=pwZA_*3+rujuF32VU05_P#&$d!+Q+P<|RdABvUZ_j>Cj`pcs~-=3tgA3xgY
z^43+m4b2yq`|Gzp-MY7nztg)80ZNOp5S6ki({=9s;Q_^$NYVClr}F4kV&a5`XxzpC
z$h+;mwAb|(pm!j@{7PS<|NQj@_(ku2`U1;#V}u{y9LW4dKRuTzZx^PgN9Fy%q9?;&
zf$YAz`+n?BYXhR~j;I56eldfI2FU3=)^G{FjNfvufvaD7O;EnBc^R&mM=oH+Q?7Ys
z&7SvZXP$7emR$sGDYMY&>m+5A363(=xUv_aK?@8Pnq?<&R;fIF$!Fbh)|<Iw<&`nD
zWEjhM<ijid)8LO>$$bVy`RY%s;8%&bh8w|L+%XG;WWRai1Mtgr(|^5*AA~9x<O6fZ
z2KBOs3FG`4TXc9P%wx2VBb1Y@+W;WK+6-qhfq|=K;@t8jrAW@ev4bFm=Y?u9Fp!zc
zf|I2ZwUVUt5^Lib$!Bii(n@qgn?M9pBLO#q6lB%Ph##pPF{C(Rm6;n0_r!y>QLBwx
zYtlmGR7k3@G!f}CL_77`xwkI8_tABfLC`=RZOG_j4Aqhp3n^?V<|}%v7+E#8W@6oj
z=|uR<I(fD!v(GVgl|>6OvD%W=*I2r9+E9vJH}AG(_dT{cV$I2`vo{y-K3t!y-K>6f
z{QztEX005iVxBx%LvIp!F_A+~I5-1irDiZL!2klf1ZP*zwU%HmIJ-uu92Ypr!A)8@
z7z2fM=fa+!+`TgQDc%zIPw`g1$6N~P{tf05sQa3?Z?Lu^&&|Ww;}iy_7vc0_e0NQy
zYa})O)%Lfc|GuHU&3DyH9BBq|CcY78zT6QnGEq?&E!V~DNP-xi%dLtlw}dfF=ivy@
zZQXSn&eLk~=#scA9WxP{+xFt=y(4&eQQL~UvE%F}937hETV##%F!Z=D_)w-J%AIFf
zBAlzm=+zbB&u%PBWqE6BnGf_Omp$rxYfoF)^KFf;;n-E)ldIBPs%!4t4kBAoC>@MY
z^<DZ4EwV9Ds#p_Ag~Wjo`w$?J=SE(~fo;lAq^@RJS%`2raoU^L>U)Y8g7-8xo|Ytj
zwKW^%y=65kt=B~?s5c;WbHeXBJfMcijD?MY87S0YsP7$1!V^>@RdsBb&N(odkXRt-
zv8IuaY={Ral><`)LInJ%g}m%Fuz|fXdrtS98a4qhI|Id`GS@T=?rS3)?)b7uz?GvA
zezwv`)q^9bm-#}<hMnV!RaXJ6c~ypW=w(C90HkK^fvr^(P9Mc~`s^Vv=>A;Qv13C#
zujym#*2p_zWj0C65YRyfmr!)0tZ*B}8#2lz1F`NEQVm40ad%dmJL1Pkx%w!s1I*e;
zZJ%v()A}_MKhUP1eek!T--iB!hN9XU+Ms4AYRn-l#iv1Su6@)3T~LUX@zOSo73Y)E
zqTSX7Jx4a!gZhk|b`sFGC74pZQ#=@wie8-mV$(1ic}67U%(0#%Xfczb+T&eiAkmBv
zL-NTTwN_K7fv1oM8wA$P)-a0E0g=s+cb-xyPQTS<kjBNK?=PDBR9txQvF2VHa$<GX
zk8{5nsy*Zn7)7<~4J`^vLt;Vx#{S!cYFi{vV49KJJF-Y*My#ZCXGVKuSs={KX2m;d
zct*C5B=5nn1Gombs4j|17HTXBPhgc;(Huad09BxhnjLtpF=B(u<;d!ejEBV4;h3O?
z?NK3b-N<dtlA;>OxsM~0(njw;7fpB<VKx-j<?w<GKZBQy4Ub3ii}$-w^tyBbjhx}x
z_wrg`O?U_4hD5vO1NwG7ME&}>WnG@UV9!wnH9{`No3bIo5O5{3xAp<g3_kZoWi7aY
z@(aVhf}beWZ`3@+zi2cNVwlH!0WZ8NeA<`SHhp&D|HV+8gn{?ezX5r=*Zs3J<ZA!`
z0flKpLr_UWLm+T+Z)Rz1WdHzpoPCiyNW)MRhX1A&i&Q$;LBt_Lb+X_Kag-_+!9r;(
zwCZ4T(-$;pNK#xJ1=oUukHxBki?gl{u7V)=0C9D3Qgo3L&rJ#~VmxrUAOAi7&%NgY
zLbJ+LGcXRQnq{ODaWR))6?<P1L;yZaAS^LcPi7Xg@T{+U>ZH1h@htDYKdWCUm<;fV
z#B)qHEaDB~nN3UQyiXiqWl14ECmu8Cg2azpmtB72Tyj|8nGqwKo+pkFi={4>yO@;?
zm3W#ss;C;}3ptk+&Rd+-YMr(3$zK>MXe$}6(;7wsOGqLG5i;tipb85y+BH&4r0G2F
z;U9ARDRRl=s(_JW0X3+Q96$IU{GP2@oSJl#LUEwy#kN02fZko8)v)dFW7}?>0RCs-
zO6&M*O<?wu^hQUE9s%KP;NrTY$$P-%4lwwnONQh~ep*7Y2)v)sH|2qWTcB^vom=}H
zrw>4uX0?0+92^3pCCXm+cz3XSZvXbQ=l26r9CDfqlcy>G000JJOGiWi^#Jt%^#@PW
z`Tzg`32;bRa{vGf6951U69E94oEQKA00(qQO+^Ri2m}E)DBSly^#A|?6-h)vRCwC$
z+PzA{U=+sj=k*5sqPYV1h>%PUnL=^MluO7O0$sXhbrFiU;p8CV)WN9*(cLRh{JMhU
zBvcVGZ4>h9|2GAa7tT33nVv`h00000;NKgKEBm;PLs^yt_SgFQ)x&WptBcg?BK3L*
zaVTrl{Nlkfk8E?W<Mj~YP`1)xpN5bnft7jGsK$+-ZqDxHPS57<?eW<?y}o$y#&@^2
z)pQ8$uTsY=?@O%!0000000000@Jf~hpQ5OxqUdjQ^`C-UwfTd+eM!>A{7Q$zN+-t?
zx31zw<I1itCpwB!Nz%>zt<I+pu2&mS7pawb)LJ097}59g6KJ#fuS4kN0J@5zdl`9m
hT@=|r0002i=N-IzZP_V=#>W5v002ovPDHLkV1oRQjc)(|

literal 0
HcmV?d00001

diff --git a/Resources/Textures/Objects/Tools/access_configurator.rsi/meta.json b/Resources/Textures/Objects/Tools/access_configurator.rsi/meta.json
new file mode 100644
index 0000000000..959c950201
--- /dev/null
+++ b/Resources/Textures/Objects/Tools/access_configurator.rsi/meta.json
@@ -0,0 +1,62 @@
+{
+  "version": 1,
+  "license": "CC-BY-SA-3.0",
+  "copyright": "Color-swap of the network configurator made by 20kdc (github) for ss14",
+  "size": {
+    "x": 32,
+    "y": 32
+  },
+  "states": [
+    {
+      "name": "icon",
+      "delays": [
+        [
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1,
+          0.1
+        ]
+      ]
+    },
+    {
+      "name": "inhand-left",
+      "directions": 4
+    },
+    {
+      "name": "inhand-right",
+      "directions": 4
+    },
+    {
+      "name": "equipped-BELT",
+      "directions": 4
+    }
+  ]
+}