/os blockprops [id] odoor [block] can be used to bypass block permissions

ClassiCube / MCGalaxy

A Minecraft Classic / ClassiCube server software

GNU General Public License v3.0

172 stars 80 forks source link

/os blockprops [id] odoor [block] can be used to bypass block permissions #631

Closed xnotx123 closed 3 years ago

xnotx123 commented 3 years ago

For example, if the block FlagBase is only allowed for moderator+, someone of a lower rank could use the command /os blockprops [id] odoor FlagBase to circumvent the permissions. Note that this user would have no way of destroying the block after placing it.

UnknownShadow200 commented 3 years ago

It would be very simple to change /blockprops to not allow assigning oDoors to block IDs that you are not allowed to modify

Actually preventing oDoors themselves from placing blocks the triggering player is not allowed to would be very difficult

xnotx123 commented 3 years ago

I think your former suggestion would be perfect.