ironmonk88 / monks-enhanced-journal

GNU General Public License v3.0
51 stars 51 forks source link

[BUG] shared page linked monster actor whitout permission #684

Closed Hazuma81 closed 4 months ago

Hazuma81 commented 5 months ago

Describe the bug Hi everyone, I have a problem regarding the monk journal. I shared a blank page where my players can write information. By pure chance one of my players noticed that by selecting the name of an npc, a tab appeared showing the links to that name, stat block, handout etc.etc. I checked the permissions and none of the players have permission to see anything about the monster in question, yet they manage to open the card To Reproduce Steps to reproduce the behavior:

  1. create new page
  2. write monster name
  3. select all name
  4. automatic windows appear and show the GM content to the player

Expected behavior Aif the player writes the name of an NPC or monster he should not be able to view his status block without permissions

https://github.com/ironmonk88/monks-enhanced-journal/assets/161341335/7114cc08-a6fd-4174-9c01-37194f2223eb

Screenshots video attached

Please complete as much of the following information as possible:

Additional context Add any other context about the problem here.

Crowguard commented 5 months ago

2nd edit: This is a probably an interaction from another module. It is not something I can replicate with MEJ; the player is not able to see links they don't have permission for to begin with, so I can't try opening said links.

Video here, only links showing are PF2 compendium links that they have access to by default.

https://github.com/ironmonk88/monks-enhanced-journal/assets/99844555/7993d6de-93a1-40a1-96dc-e215d0a4152c

ironmonk88 commented 4 months ago

Should be fixed in the latest version