Does anyone know how to stop players from voting themselves as Referee? I don't really want to switch voting off totally. Is there a vote_allow_referee cvar like in RtCW?

The danger is that in a server with only a few players, a player can easily make himself Ref, then pbkick/pbban an admin who has his admin status suspended. Not good.

I've temporarily removed all harmful rights from referees, rather than switching voting off all together.

Which mod is this?

ROCmod 2.1a

How is this possible? I've been using Roc for quite a long time and have never come across this. Are these clan members or non-clan players?

They are non-clan members. Very easy to do: join an empty server, or one with only couple of players, and 'callvote referee #ID' using their own ID.

I've tested it on a few servers and found I can do the same thing.

I'm sure it can be locked down, but damned if I know what cvar it needs.

I just tried it! WOW! Now that's interesting. I would ask at Roc's forum.

But these may help for the time being. I don't see anything as specific as you are looking for.

g_enableReferee
       default: 1
       desc: If set, referees are allowed on the server.
Or.....

I know that part of the problem is that they can kick/PB ban players.

You can turn off those options for ref's. We have them turned off for everyone on our server.
g_allowPbKick
g_allowPbBan
 
       desc: Specifies which commands are enabled and available for use by various
             players. This cvar contains a row of four digits, each digit
             representing a different setting.
             First digit: Sysop restrictions
                       0 = Command is not restricted while a sysop is present
                       1 = Command is restricted while a sysop is present
                       2 = Command is restricted when a sysop is not present
             Second digit: Admin commands
                       0 = Command is disabled for all admins
                       1 = Command is enabled for all admins
                       2 = Command is enabled for all admins, even while suspended
             Third digit: Referee commands
                       0 = Command is disabled for all referees
                       1 = Command is enabled for all referees
             Fourth digit: Clan member commands
                       0 = Command is disabled for all clan members
                       1 = Command is enabled for all clan members

This is the thing; g_enableReferee is set to 0...!

For now, I've just removed all the permissions for Refs. It's gotta be a bug. I'm waiting on an answer from ROC. When/if I find a fix I'll post the answer in here.

It's a SOF2 thing, rather than ROCmod. Here's the answer:  novote_referee "1"

(Thanks to |SiN| Tyler_Durden and ]-RoC[- Arrnor)

Here's the rest:-

Quote

novote_clientkick novote_g_doWarmup novote_g_gametype novote_kick novote_map novote_map_restart novote_mapcycle novote_mute novote_nextmap novote_poll novote_referee novote_rmgmap novote_timelimit novote_scorelimit For any option that can be used in /callvote, there is a corresponding novote_ cvar automatically created. For example, "/callvote referee" has a novote_referee cvar, "/callvote poll" has a novote_poll cvar, "/callvote map" has a novote_map cvar, etc.

Interesting! So, SOF has had referees all this time........  I never new that.
Thanks for posting the answer.