Private Roles

could have a configuration of roles that only the owner of the server could change it (or people with admin permission). First of all, I want you to consider the role hierarchy, that a user with permission to manage roles can give a role that is below their highest role to someone else. Considering this, if a user who doesn't have admin permission but has to manage roles, then if there is a role with admin permission but it's below him, he can become admin whenever he wants, because if he has permission to manage roles, he can put a role with admin permission on it whenever you want. So my suggestion is that there is an option that only the server owner can configure for each role, which is the option for you to select which roles can grant this role to users. This is in the same way as private channels, that you select which roles can see them, but the difference is that whoever is private is the role itself.

Comments