search

TownyAdvanced / TownyMenus

An easy-to-use and accessible way for players to use Towny commands.
GNU General Public License v3.0
20 stars 6 forks source link

Nation Withdraw Exploit #8

Closed ShermansWorld closed 1 year ago

ShermansWorld commented 1 year ago

Players without perms to /n withdraw within their nation were able to withdraw money from their nation bank via the Towny menu GUIs. I have confirmed this is not a result of how permissions are configured on my server. See screenshots below. The player in the screenshots does not have a nation rank and does not have permissions via the /n withdraw command.

withdraw

playerisnottownyrank

Warriorrrr commented 1 year ago

Thanks for the report, I've fixed it in the commit above and will be releasing version 0.0.4 shortly.