Additional context
An easy fix should be just to add @loader.owner on all of the *add and *rm commands in hikka_security.py
(thanks to @visionavtr, for finding this out)
Always check security rules of chosen group (in this case - sudo)
Use .tsec, it's a more convenient way to add security rules. Groups (owner, sudo and support) are kept as legacy and should not be used. If you use them, you should migrate to .tsec instead
[x] This bug is related to Hikka userbot itself. It is not related to modules.
Describe the bug A 'sudo' user can use
owneradd
on themselfsTo Reproduce Steps to reproduce the behavior:
sudo
group.owneradd
on themselfs, giving them owner accessExpected behavior Some sort of "Permission Denied" error
Userbot installation info:
Additional context An easy fix should be just to add
@loader.owner
on all of the*add
and*rm
commands inhikka_security.py
(thanks to @visionavtr, for finding this out)