Token Settings

Is there a way to have all players see the number in a token bubble but not be able to change it or move the token.

Nope.

/w Brian @{target|Token|bar1} / @{target|Token|bar1|max}

Will that return the value on a token the player does not control?

keithcurtis said: Will that return the value on a token the player does not control? Yes, including any token on the map... such as monsters.

Wow, sounds ripe for abuse. Couldn't a player find out an enemy's health/AC? Edit: Just tried this out. Glad my players aren't particularly macro savvy.

keithcurtis said: Wow, sounds ripe for abuse. Couldn't a player find out an enemy's health/AC? Edit: Just tried this out. Glad my players aren't particularly macro savvy. You can also edit the html/css on the client side to get rid of fog of war and dynamic lighting. 

I knew that one. I use it for camera feed log-ins for recording purposes. But that's a little more advanced, skill-wise. I just had no idea (never tried) to get info from a token I don't control. I suppose I simply assumed it would be forbidden. I haven't tried but I would guess that this works for reports on token numbers but not those associated with a character sheet? I would hope there would be that level of DM secrecy.

Nope.  Works for associated characters as well.

So a thoroughly unscrupulous player could create a "report" macro that scrapes a target token and whispers a character sheet to him? (Fortunately, I doubt my players have the time, patience or desire to do such a thing).

Yes. 

keithcurtis said: So a thoroughly unscrupulous player could create a "report" macro that scrapes a target token and whispers a character sheet to him? (Fortunately, I doubt my players have the time, patience or desire to do such a thing). Nothing a non-digital cheater couldn't do by sneaking a look at the DM's notes or having a copy of the Monster Manual or even the SRD on their phone etc... Cheaters gonna cheat :( I guess all we can hope for is that most players won't put that amount of effort into cheating and that the majority wouldn't want to anyway, they are only robbing themselves of the fun of playing... And if the worst comes to the worst I'm sure Aaron could write a script to prevent, or at least expose it ;) In fact the whisper surfacing script that exists somewhere would do it since a player couldn't whisper the info to themselves without the DM knowing... but then you have the 'big brother' DM to deal with, catch 22 much?

/talktomyself

I was just surprised it's so easy.

Sky said: /talktomyself Fair point, I always forget that you can use that and still make attribute calls etc due to practically every command i run from chat being API based lol...

Only thing I haven't been able to find client side is a way to see the GM Layer as a player. So if you want to hide attributes and such, use a token bump script like what Aaron wrote and put dummy tokens on the object layer and do all your stuff on the GM Layer.