Well, hello again!
I faced with a pex problem.
Was using: - Magic.commands.wand but it does not work properly. Only - Magic.commands.wand.*
So, I don't want to let players use wolf wand or any...But I want OP admins use it, that meas I can't just turned it off and that's not a solution.
What the problem could be? With - Magic.commands.wand - no any message or error, but if I wont give that permisson, it'll spam a note that you have no permission.

This sounds remarkably similar to this issue that was just closed:

#197

You're probably missing Magic.commands.wand.create

Damn, Thanks!

Oh, how should I block wolf wand for players?

Use permissions like Magic.commands.wand.wand.wand (erm, yes, 3 wands)

or

Magic.commands.wand.wand.broomstick

To give them permission to spawn specific wands. This will block all the others (do test that though...)

well, my pex now
- Magic.commands.wand.create
- Magic.commands.wand.wand.wand
- Magic.commands.wand.wand.broomstick
simple wand and broomstick are blocked.

You also have

• Magic.commands.wand

?

If so.. I think that all ought to work :\

If you want them to be able to "/wand" with no params, they also need

• Magic.commands.wand.wand.default

But just given what you have up there /wand wand or /wand broomstick should work

If I add Magic.commands.wand - wolf is available.
PEX:

• Magic.commands.wand.create
  • Magic.commands.wand.wand.wand
  • Magic.commands.wand.wand.default
  • Magic.commands.wand.wand.broomstick
    /wand wand
    /wand default
    /wand broomstick
    and /wand*
    still no permission

I'm using default config,

May be for 1.8 some different permissions?

Maybe try Magic.commands.wand

And then negated: -Magic.commands.wand.wand.*

... ?

No wand and no message.
like I did not add Magic.commands.wand.create perm.
but pex:
- Magic.commands.wand.create
- Magic.commands.wand
- -Magic.commands.wand.wand.*
- Magic.commands.wand.wand.wand
- Magic.commands.wand.wand.default
- Magic.commands.wand.wand.broomstick

Can you do /pex debug (or whatever the command is) to see what permission you're missing?

I was pretty sure that was all of them, literally just went through this with someone else and got it working. :(

LocalHero - op
LocalHero1 - user

[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from * (CACHE MISS)
[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.use', regex-matched a value of true from * (CACHE MISS)
[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.bypass', regex-matched a value of true from * (CACHE MISS)
[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.override_bind', regex-matched a value of true from * (CACHE MISS)
[01:49:39] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.override_bind', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.use', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.bypass', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.override_bind', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.override_bind', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.override_bind', regex-matched a value of true from cache.
[01:49:40] [Server thread/INFO]: [PermissionsEx] User LocalHero checked for permission 'magic.wand.override_bind', regex-matched a value of true from cache.

[01:49:50] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand', regex-matched a value of true from cache.
[01:49:50] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.', regex-matched a value of undefined from cache.
[01:49:50] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand', regex-matched a value of true from cache.
[01:49:50] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.', regex-matched a value of false from cache.
[01:49:50] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.create', regex-matched a value of true from cache.
[01:49:50] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.wand.', regex-matched a value of false from cache.
[01:49:50] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.wand.', regex-matched a value of false from cache.

[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand', regex-matched a value of true from magic.commands.wand (CACHE MISS)
[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.', no match found (CACHE MISS)
[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand', regex-matched a value of true from cache.
[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.', regex-matched a value of false from magic.commands.wand.* (CACHE MISS)
[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.create', regex-matched a value of true from magic.commands.wand.create (CACHE MISS)
[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.wand.', regex-matched a value of false from magic.commands.wand. (CACHE MISS)
[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.wand.', regex-matched a value of false from cache.
[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.wand.default', regex-matched a value of false from magic.commands.wand. (CACHE MISS)

/wand
/wand wolf
etc.

Were you just using the /wand command there, like just "/wand"?

[01:50:32] [Server thread/INFO]: [PermissionsEx] User LocalHero1 checked for permission 'magic.commands.wand.wand.default', regex-matched a value of false from magic.commands.wand. (CACHE MISS)

If so you need that permission as well

one more time:
localhero1 - player
commands
wand
wand wolf
wand broomstick:

10.02 03:59:51 [Server] INFO User LocalHero1 checked for permission 'magic.commands.wand.wand.broomstick', regex-matched a value of false from magic.commands.wand.* (CACHE MISS)
10.02 03:59:51 [Server] INFO User LocalHero1 checked for permission 'magic.commands.wand.wand.', regex-matched a value of false from cache.
10.02 03:59:51 [Server] INFO User LocalHero1 checked for permission 'magic.commands.wand.wand.', regex-matched a value of false from cache.
10.02 03:59:51 [Server] INFO User LocalHero1 checked for permission 'magic.commands.wand.create', regex-matched a value of true from cache.
10.02 03:59:51 [Server] INFO User LocalHero1 checked for permission 'magic.commands.wand.*', regex-matched a value of false from cache.
10.02 03:59:51 [Server] INFO User LocalHero1 checked for permission 'magic.commands.wand', regex-matched a value of true from cache.
10.02 03:59:51 [Server] INFO User LocalHero1 checked for permission 'worldguard.region.bypass.world', regex-matched a value of undefined from cache.

• Magic.commands.wand.create
  • Magic.commands.wand
  • -Magic.commands.wand.*
  • Magic.commands.wand.wand.wand
  • Magic.commands.wand.wand.default
  • Magic.commands.wand.wand.broomstick
    my permissions
    I tried also:
  • Magic.commands.wand.create
  • Magic.commands.wand.wand.wand
  • Magic.commands.wand.wand.default
  • Magic.commands.wand.wand.broomstick

I think with the way pex works the negated permissions need to go on a different group then you inherit from that group.

the problem is that I wont let default group set use admin wands.
Making inheritance for default group is qute weird?
added

- -Magic.commands.wand.wand.wolf

it works, but I suppose all other wand.* commands are still working for a default group

So, you advice to make a pre-default group?

This is assuming your admin group inherits from the default group

I would add

-Magic.commands.wand.wand.*

(negated, double .wand) to your default group

Then the rest of them go on your admin group.

• Magic.commands.wand.create
  • Magic.commands.wand
  • -Magic.commands.wand.wand.*
  • Magic.commands.wand.wand.wand
  • Magic.commands.wand.wand.default
  • Magic.commands.wand.wand.broomstick

well, no message, no wand. I'm checking default group and it cant use wand and broomstick with such config. May be I can't get what do you want to tell me.

I mean you need two groups, a default group and an admin group. The admin group inherits from the default.

The negated permission goes on your default group, the others (not the negated one) goes on your admin group.

This is because in PEX a negated permission takes precedence, except when inheriting.

I honestly hate using permissions and rarely have a reason to myself, but I do know they work.

I created a group with 1 negate perm :)
and make default inherit for it.
It works. Thanks.
Keep configuring:)