WORLDGUARD-4022 - Reported by hutt132

The "/wg version" command does not have a permission. Currently anyone can enter "/wg version" and see the plugin version, even if worldguard.* is negated.
Solution would be to create a permission for this command that is not enabled by default. It would also be nice to assign a permission to disallow the plain "/worldguard" command.

The same issue applies to WorldEdit as well. Currently any player can do "/we version", "/we tz", and "/we cui" regardless of permission.

Spigot 1.13.2
WorldGuard 7 b1767
Worldedit 7 b3992

Comment by me4502

Is there a reason to have a permission node on these? They generally have functionality that doesn't make sense to lock away.

Comment by hutt132

@me4502 I would prefer players to not have access to see the versions of the plugins I use.

Comment by wizjany

this has been discussed in the past and
a) security through obscurity is no security at all
b) you can always just alias away the command if you really want