search

TechnicallyCoded / Inventory-Rollback-Plus

Spigot/Bukkit plugin that allows server moderators to restore player items and data from backups.
https://www.spigotmc.org/resources/85811/
Other
78 stars 44 forks source link

Bug report: Ir restore player gives access to every backup #96

Closed TechRoot closed 2 years ago

TechRoot commented 2 years ago

Bug description:

Clicking on head slot on /ir restore player gives access to every backup of every player ever joined.

Server details:

[20:29:35 INFO]: This server is running Paper version git-Paper-333 (MC: 1.18.2) (Implementing API version 1.18.2-R0.1-SNAPSHOT) (Git: 9fd870d) Running InventoryRollbackPlus v1.6.6

How to reproduce:

Give permission inventoryrollback.restore and inventoryrollback.viewbackups to a player, then let him use /ir restore ItsOwnName Click on first slot, head slot, a full list will be shown. Accessing every player backup.

What was expected:

A player should only be able to access its own backups, not other ones.

TechnicallyCoded commented 2 years ago

Intended behavior. This is a moderation tool.