Server Implementation

Paper

Server Version

1.17.1

Describe the bug

With //schem list ../ players can list all UUIDs of players that have schematics saved and list their schematics.

To Reproduce

1. Save a schematic with a different account.
2. Use //schem list ../ on the main account.
3. You can now click on the listed UUIDS to list their Schematics.
4. But without worldedit.schematic.load.other the schematics can't be loaded.

Expected behaviour

I don't think you should be able to see others UUIDs or Schematics, as they could be working on something.

Screenshots / Videos

No response

Error log (if applicable)

No response

Fawe Debugpaste

https://athion.net/ISPaster/paste/view/97e2c7723ccc424a93b196da0252da6f

Fawe Version

FastAsyncWorldEdit version 1.17-419;9fdff97

Checklist

• I have included a Fawe debugpaste.
• I am using the newest build from https://ci.athion.net/job/FastAsyncWorldEdit-1.17/ and the issue still persists.

Anything else?

I would reccomend to check if the filter contains ../ so you could check for a permission, like worldedit.schematic.list.other. I did not make this a feature request, as I think this is somewhat severe.

Players can't load other schematics, but he can list it. It this as intended? In older versions, players hasn't the permission to show other schematic lists, if he can't load it too.

First time I hear about that, I'd rather label that as RFE than as bug, thoughts?