Describe the bug
Players will get the item even though they don't has permissions.
And also can run the commands.

Besides, I have a question that the item permission is for giving or execute commands?
(I think it is for giving...)

To Reproduce
Steps to reproduce the behavior:

1. Setup a item with "triggers: join" and "permission-node: itemjoin.test"
2. Join the server.
3. Get the item and can execute commands.

Screenshots

Pastebin
items.yml
https://pastebin.com/cxhCbDHX

Other files: default

Please complete the following information:

• ItemJoin-5.1.1-SNAPSHOT-b585.jar
• Paper version git-Paper-262 (MC: 1.16.4) (Implementing API version 1.16.4-R0.1-SNAPSHOT)

Additional context
Please look at this, thanks~

You say that your other files are default, since you didn't provide your config.yml I will assume that this is true. Did you enable Item Permissions in the config.yml?

  Obtain-Items: false
  Obtain-Items-OP: false

These need to be set to true, OP is for OP players to require perms--for clarification.

I haven't set it up for two years, haha
Thanks a lot.