Grief Prevention chest protection bypass
WayGroovy opened this issue ยท 2 comments
process of elimination, OtherDrops 2.8b512 allows a player to bypass griefprevention 7.7 chest protection in spigot 824.
steps to reproduce:
server running spigot 824, otherdrops 2.8b512, griefprevention 7.7, essentials, group manager
player A creates protected chest.
Player B can open protected chest, without permission, while otherdrops is loaded.
Haven't done extensive testing yet. I will once I get some time and return to this issue.
I would also like to add that 2 weeks ago players were able to open locked chests. I tried using 3 different chest protection plugins aswell as repeatedly uninstalling and re installing them all to no avail
It took me a very long time to figure out what the problem was. I went as far as redoing permissions, uninstalling all of essentials, and then uninstalling all but 5 plugins. After none of that worked i just decided to do /od disable
Which led me to figure out that otherdrops was the cause. i spent the day re installing all plugins and redoing all the config files. For the time being i reverted back to the march 10th build.
This is a serious bug i hope gets addressed soon.
Fixed in dev build (commit cbeeb76) but hadn't realised it was in a live build, sorry about the issue. I've deleted the Beta versions it affects ( 2.8b.382 - March 26 is safe ) and will put up a warning on the page to downgrade. I'm working on finalising a feature (tool: ~) asap so I can release a new safe beta.