Hi, I am new to permissions so I have some questions regarding default permissions (if any) of LuckPerms.
As an example - /help command.
Btw, I also have EssentialsX installed so I call vanilla help as /minecraft:help.
And here is the question: when I have Minecraft.command.help permission undefined for default group (no other groups on the server) then members of default group are still able to execute /minecraft:help. And verbose mode also shows that other permissions have been also set for the player executing /minecraft:help command.
Like that:

[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.help - true
[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.advancement - undefined
[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.attribute - undefined
[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.ban - undefined
[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.ban-ip - undefined
[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.banlist - undefined
[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.bossbar - undefined
[01:52:24 INFO]: [LP] VB > Steve - minecraft.command.defaultgamemode - false

As Steve is a member of default group I do some checking:

> lp group default permission check minecraft.command.help
[02:18:45 INFO]: [LP] default has permission minecraft.command.help set to undefined in context global.

> lp group default permission check minecraft.command.defaultgamemode
[02:19:20 INFO]: [LP] default has permission minecraft.command.defaultgamemode set to undefined in context global.

So why some permissions are shown as true or false in verbose mode (and those with true are available to group members of course, like minecraft.command.help) even if they aren't set (undefined) for the group.

Thanks.

It is possible that the minecraft.command.help is not directly set in default group. Perhaps you set it in another group default group inherits from or directly to the user. The best way to check is to run /lp user USER permission checkinherits minecraft.command.help

@benwoo1110 hi! it is fresh installation of paper/luckperms. So there is no other group than default one. That's why I am sure LuckPerms has some default permissions for builtin Minecraft commands.

LuckPerms doesn't have any defaults for other plugins (or vanilla/bukkit commands), the defaults are provided by the plugins themselves. In this case the Minecraft /help command defaults to true, if you want to disable it then set it to false.

You can see all defaults for Bukkit/Minecraft here (ctrl + F then type "everybody"): https://bukkit.gamepedia.com/CraftBukkit_Commands

LuckPerms does not have some default permissions for builtin Minecraft commands, your server software has those.

If you are using bukkit/spigot/paper, here are the command and permission node for these servers: https://bukkit.gamepedia.com/CraftBukkit_Commands#Bukkit_Commands_and_Permissions

From the bukkit website, it seems that the permission node is minecraft.command.help is given to everyone by default, perhaps set that permission node to false if you want to deny user access.

Thank you guys :) I've got it.