Allow those with the "manage roles" permission to view a server as role

0x414b

• September 25, 2020 19:20

With the new View as Role feature, only server administrators can view a server as a role. In my eyes, this defeats the point of the feature somewhat. It's not uncommon for users who are not administrators on a server to manage permissions systems for that server since they have the manage roles permission.

 

The concern of potential priviledge escalation can be avoided by only allowing a user to view a server as the maximum role they have, similar to the way roles work now. In the screenshot below, the highest permission I can assign is backend dev, because I am only a moderator, regardless of the fact there are roles above that (eg founder).

 

 

Cheers - 0x5444

 

10

• 

  andreashgk

  • September 26, 2020 16:09

  I assume they dont have this because you then might be able to see hidden channels

  0
• 

  Sa'Kagé

  • September 28, 2020 11:34

  Not if you can't use any role higher than the 1 you have.
  And everyone with "manage roles" can give lower roles to themselves anyway.

  0
• 

  0x414b

  • October 02, 2020 08:01

  "I assume they dont have this because you then might be able to see hidden channels"

  This is why I think it's a good idea to limit it to only roles you can assign to yourself/other people.
  

  "And everyone with "manage roles" can give lower roles to themselves anyway."

  If you want to view the server as a base user and your top role is the one that grants you priviledges, there's no way of removing that yourself. You can't see the state of the server as a normal user sees it without getting another, higher ranking person involved, which is a waste of time for both parties.

   

  1
• 

  Sprunghans2nd

  • January 09, 2021 02:31

  I agree that it's should be accessible to those having manage roles and permissions. You shouldn't be required to additionally provide people admin permissions in order to properly check their work.
  
  Given that some people have servers, and might have tech-savy or experienced people helping them wouldn't neccessarily mean that you want to give them the additional rights and responsibilities that come with it.
  
  Of course, those people should only be able to see the server from people's point of view up to and including their own role as already mentioned.
  
  Try sharing the link with fellow moderator colleagues on other server you are part of as well.

  1

Please sign in to leave a comment.