an issue with the new server template feature that needs addressing!

SevensU7P

Hi There,
I think this is the fastest way I can get a message to someone within Discord that can react quickly to this as myself and a friend (fellow server owner) have found an issue with the new Server Template feature that has just been released.


We feel that allowing anyone other than the server Owner access to this feature compromises our and any owner's servers as anyone with Admin access can effectively steal our server.

To make matters worse, we have noticed that no entries are being made to the audit log when we delete or create a new server template.
We therefore not only have an issue with security but no way of knowing that our server is being stolen and copied elsewhere as an admin could at the moment create a template, making a clone of our server and delete the template they have made thus removing all evidence and no log to say that it has happen or who did it....

This is something that needs addressing VERY quickly. I would suggest disabling this feature temporarily until it is safe. Making it only available to Owners. Or, allowing owners to allow access by role or user and at least have changes to server templates added to the audit log.

Fortunately I trust all my admins however I know that there are thousands of servers out there run by owners that are not so careful with whom they give roles too (admin especially) so this could be a massive problem for the Discord community.

I hope this is seen as soon as possible.

Please can you keep me updated on this matter and created with urgency.

This is definitely a concern, more for other server owners because as of now, I have heard of admins on other servers are quickly making backups and stealing server templates already. These no doubt will be used to sell to new potential server owners.... Yes this goes on sadly.
so yeah this is a big blow to the community I feel. Why would a server owner that has spent months if not years on and fine tuning only to allow some one else to have it at your own time and in some cases expense with Nitro, bot premiums etc. As much as this feels like a great idea I feel it is not and should be locked down or at least giving the owners the ability to lock down as I would say that a lot of the serious owners would not want their servers templates falling into the wrong hands... :|

Many Thanks..

16

Opmerkingen

8 opmerkingen

Datum Stemmen
  • SevensU7P

    I have already brought this concern up with a few other server owner friends and they are all in agreement. This needs more work and security as in its current state is already compromising servers as we speak...

    They also feel the same, Why would we want someone else getting our hard work for nothing...

     

    Thanks again

    9
  • SevensU7P

    Hello again,
    I would like to update you on this issue as things progress.
    I have been have meeting with other owners in private VCs out of ear shot of admins making them aware of this issue and they are all in agreement, This is a bad thing. Some have gone as far as removing admin perms from roles that would normally have this permission ultimately to safe guard there server until this is sorted.
    I can not stress enough how damaging this will be to the communities on Discord and ultimately the platform in a whole.

    Like I said before, this is already being exploited. Most of the server owners and admins are young teenagers. Some of which have dark sides and do not need much of an excuse to find a floor in something and exploit it. Some even adults!!!

    Please, with cherries on. Re-look and re-evaluate this risk assessment of this feature you have recently implemented because in it's current state, is only a security risk to servers, their owners and ultimately their community and in some cases, their Brand!

    I hope this is seen and more voice heard very quickly. As it needs to be rectified asap....

     

    Thanks 

    8
  • SevensU7P

    This is worse than originally thought. Its not Admin you need to gain access to this feature, its Manage Server permissions!
    Well Done Guys, Well Done! xD #slowclap

    Please sort this as this is a joke!!!

    Thanks

    1
  • ZOO

    Have they changed this yet? Or is it still not showing up on the audit log?

    0
  • Bryn

    Why are you allowing people to literally copy and steal other peoples' servers? Right down to the channel names? What kind of insanity is this?! At least give every server owner the ability to toggle this option OFF so they don't have people copy-pasting and stealing their work! 

    0
  • Coil

    Can I ask a question? Why is it important that your admins cannot copy a template? Anything in the template can be made from scratch, it only saves them time that's all. What am I missing here?
    It's a genuine question, please look at it as such. I realize I might be ignorant of something here, given the passionate responses in this thread.

    -1
  • Yam

    Agreed. 😎

    0
  • Aunix TIGYT

    Coil
    Because if you actually spend some effort into it, it'll take too long and be too exhausting to do.
    I got scammed by this method today.

    0

U moet u aanmelden om een opmerking te plaatsen.