OtherDrops

226k Downloads

Grief Prevention chest protection bypass

WayGroovy opened this issue ยท 2 comments

commented

process of elimination, OtherDrops 2.8b512 allows a player to bypass griefprevention 7.7 chest protection in spigot 824.

steps to reproduce:

server running spigot 824, otherdrops 2.8b512, griefprevention 7.7, essentials, group manager

player A creates protected chest.

Player B can open protected chest, without permission, while otherdrops is loaded.

Haven't done extensive testing yet. I will once I get some time and return to this issue.

commented

I would also like to add that 2 weeks ago players were able to open locked chests. I tried using 3 different chest protection plugins aswell as repeatedly uninstalling and re installing them all to no avail

It took me a very long time to figure out what the problem was. I went as far as redoing permissions, uninstalling all of essentials, and then uninstalling all but 5 plugins. After none of that worked i just decided to do /od disable

Which led me to figure out that otherdrops was the cause. i spent the day re installing all plugins and redoing all the config files. For the time being i reverted back to the march 10th build.

This is a serious bug i hope gets addressed soon.

commented

Fixed in dev build (commit cbeeb76) but hadn't realised it was in a live build, sorry about the issue. I've deleted the Beta versions it affects ( 2.8b.382 - March 26 is safe ) and will put up a warning on the page to downgrade. I'm working on finalising a feature (tool: ~) asap so I can release a new safe beta.