ppy / osu-web

the browser-facing portion of osu!
https://osu.ppy.sh
GNU Affero General Public License v3.0
980 stars 383 forks source link

Backgrounds of deleted beatmaps are still publicly accessible #10013

Closed RockRoller01 closed 1 year ago

RockRoller01 commented 1 year ago

Now that moderators can view deleted maps the background are no longer deleted, however the permission for viewing the assets isnt locked to moderators only. Quite yikes considering that these backgrounds could be of explicit nature

Example: https://assets.ppy.sh/beatmaps/1882266/covers/raw.jpg

squareclicker commented 1 year ago

mods can view deleted maps now? can you source this? i have some deleted maps i'd like to recover

RockRoller01 commented 1 year ago

mods can view deleted maps now? can you source this? i have some deleted maps i'd like to recover

yes we can, source: im a mod. We are unable to recover them and therefore unable to respond to requests like that.

peppy commented 1 year ago

mods can view deleted maps now? can you source this? i have some deleted maps i'd like to recover

You can contact support for this.

Now that moderators can view deleted maps the background are no longer deleted, however the permission for viewing the assets isnt locked to moderators only. Quite yikes considering that these backgrounds could be of explicit nature

honestly i don't see this as a huge deal if they are not linked anywhere. if it's bad enough (ie. illegal) please let me know and i'll remove the content manually.