[BUG] /rp expand-vert ignores permissions, usable by any player on any region
ShadowFlare opened this issue ยท 2 comments
Server and plugins versions (please complete the following information):
- Server: Paper 1.14.4 build 238
- Plugin Version: RedProtect-7.6.5-b289-Universal.jar
- Java Version: Java 1.8
Additional context
I've tested the command /rp expand-vert on a region I do not own, making sure someone else owns it and I'm not any part of it (while no longer having op on the server), and I can still use it and it does actually change the min y and max y of the region. Other commands seem to be denied as expected. Looking through the code, I'm not 100% sure, but it seems to be missing a permission check maybe? Also seems it probably doesn't log the change either like setmaxy and setminy do.
Fixed in 7193af1 on latest dev build.