Ezhh / RC_Issues

1 stars 0 forks source link

Areas and controllers #25

Open AnyZeeAreOkay opened 5 years ago

AnyZeeAreOkay commented 5 years ago

Microcontrollers (And possibly luacontrollers, though we didn't test them) can be reprogrammed in protected areas by players who do not otherwise have permission to edit in that area. This has the potential to ruin builds, or lag/crash the server if done maliciously/ignorantly.

I don't know whether the issue is in the areas mod or mesecons, or both.

Ezhh commented 5 years ago

Eww. Do you know if it happens in the main versions of the mods and is just on RC?

AnyZeeAreOkay commented 5 years ago

Hi, I got around to testing it on my own computer with new installs of both mods, new map, new names, etc. And the areas mod does not allow an unprivileged player to edit protected controllers, in any way (Including luacontrollers, which I am not sure about for RedCat).

AnyZeeAreOkay commented 5 years ago

Actually I looked in the file for the controllers, it actually checks to see if a player has the protection_bypass priv before letting them edit it.

Ezhh commented 5 years ago

I was hoping I could just update, but from what I recall I was already using the most recent version. I'm going to need to stare at code.