I think this is the fastest way I can get a message to someone within Discord that can react quickly to this as myself and a friend (fellow server owner) have found an issue with the new Server Template feature that has just been released.
We feel that allowing anyone other than the server Owner access to this feature compromises our and any owner's servers as anyone with Admin access can effectively steal our server.
To make matters worse, we have noticed that no entries are being made to the audit log when we delete or create a new server template.
We therefore not only have an issue with security but no way of knowing that our server is being stolen and copied elsewhere as an admin could at the moment create a template, making a clone of our server and delete the template they have made thus removing all evidence and no log to say that it has happen or who did it....
This is something that needs addressing VERY quickly. I would suggest disabling this feature temporarily until it is safe. Making it only available to Owners. Or, allowing owners to allow access by role or user and at least have changes to server templates added to the audit log.
Fortunately I trust all my admins however I know that there are thousands of servers out there run by owners that are not so careful with whom they give roles too (admin especially) so this could be a massive problem for the Discord community.
I hope this is seen as soon as possible.
Please can you keep me updated on this matter and created with urgency.
This is definitely a concern, more for other server owners because as of now, I have heard of admins on other servers are quickly making backups and stealing server templates already. These no doubt will be used to sell to new potential server owners.... Yes this goes on sadly.
so yeah this is a big blow to the community I feel. Why would a server owner that has spent months if not years on and fine tuning only to allow some one else to have it at your own time and in some cases expense with Nitro, bot premiums etc. As much as this feels like a great idea I feel it is not and should be locked down or at least giving the owners the ability to lock down as I would say that a lot of the serious owners would not want their servers templates falling into the wrong hands... :|
U moet u aanmelden om een opmerking te plaatsen.