search

Zarius / Bukkit-OtherBlocks

OtherBlocks (now known as OtherDrops) plugin for Bukkit (dev build: https://www.mediafire.com/?i6ows1g6kus2o0l)
http://dev.bukkit.org/server-mods/otherdrops/
GNU General Public License v3.0
17 stars 17 forks source link

Grief Prevention chest protection bypass #234

Closed WayGroovy closed 11 years ago

WayGroovy commented 11 years ago

process of elimination, OtherDrops 2.8b512 allows a player to bypass griefprevention 7.7 chest protection in spigot 824.

steps to reproduce:

server running spigot 824, otherdrops 2.8b512, griefprevention 7.7, essentials, group manager

player A creates protected chest.

Player B can open protected chest, without permission, while otherdrops is loaded.

Haven't done extensive testing yet. I will once I get some time and return to this issue.

PuRe2K12 commented 11 years ago

I would also like to add that 2 weeks ago players were able to open locked chests. I tried using 3 different chest protection plugins aswell as repeatedly uninstalling and re installing them all to no avail

It took me a very long time to figure out what the problem was. I went as far as redoing permissions, uninstalling all of essentials, and then uninstalling all but 5 plugins. After none of that worked i just decided to do /od disable

Which led me to figure out that otherdrops was the cause. i spent the day re installing all plugins and redoing all the config files. For the time being i reverted back to the march 10th build.

This is a serious bug i hope gets addressed soon.

Zarius commented 11 years ago

Fixed in dev build (commit cbeeb76334ab63d14720de228d930cc3d2d594bf) but hadn't realised it was in a live build, sorry about the issue. I've deleted the Beta versions it affects ( 2.8b.382 - March 26 is safe ) and will put up a warning on the page to downgrade. I'm working on finalising a feature (tool: ~) asap so I can release a new safe beta.