LuckPerms

LuckPerms

41.4k Downloads

Option to remove a Luckperms Editor Link

Redwolf223 opened this issue ยท 4 comments

commented

Dear Lucko,

Someone exploited our server and managed to get a Luckperms editor link. He then posted the link in a group so that everyone
could see it.

Would it be possible if i send you the link privately to remove it please? Also it would be great to add this as a feature in case other
people need this.

Thank you.

commented

Why is knowing the permissions certain groups have an issue?
The majority of that knowledge you can get from it can be gotten just as easily ingame.

If someone can get unauthorized access to editor sessions that's a much bigger concern and you need to address it.

And the link will expire automatically after a week. While it is possible for Luck to remove the link he can't do so if you don't put it here.
And it's not possible to have users be able to delete these pastes. As there's no credentials or similar connected with any paste the server can't know who posted it and consequently can't know who is allowed to delete it.

commented

If someone has a link to the web editor they can't change the permissions on your server.
They need to apply the edits which requires an already given permissions.

commented

I know, still they have access to all my groups and permissions which is nonideal

commented

If they can run commands without permissions, then there is a bigger issue than LuckPerms and out of LuckPerms control. You'd better look into your entire server setup. My guess is you are running an online-mode: false server?