Users with the "Manage Roles" permission should not be able to change the per-channel permissions of other users with the same role or higher


2 commenti

  • wiresegal

    Bumping this; privilege escalation is definitely not a thing which should be allowed. Manage Channel should give this permission, not Manage Roles, because you can give yourself Manage Channel for that channel with this exploit.

    Azioni per commenti Permalink
  • poisonedwaters

    I agree. I would like to see the permissions be more granular.

    Azioni per commenti Permalink

Accedi per aggiungere un commento.