Limit Access for Manage Roles permission
Presently, Discord's Manage Roles permission allows the user to modify/assign/create/move roles up to, though not including, their highest. However, I have noted a few problems with this:
1. Higher roles for cosmetic purposes may exist, which, when assigned to someone with manage roles permission, gives them access to everything below this.
2. It may be reasonable to give permission limiting roles, which would be higher, to those with high permissions, even so as to prevent them from accessing a channel that they have expressed disintrest in having visible (for example, some servers I am on have NSFW roles that make the nsfw channels visible)
3. Use of "tagging" roles, which serve no purpose other than existing, but being under the specific control of someone with high permissions (which are really a would-be-nice rather than a this is actually useful)
This effect may also cause suprises with server administrators (as in one of my cases, where a role was used to indicate members of a particular committee, and it was placed higher than moderators, which had Manage Roles access, so as to mark the committee members, even those who were moderators, though the role has no inheritent permission and only server as a distiguishing mark, as well as granting access to a particular channel, which is otherwise inaccessible).
I recommend that the Manage Roles, and less critically the Administrator permission, be changed to only allow access up to the highest role with either Manage Roles or Administrator permission (direguarding any higher role the person may possess that does not do so). Alternatively, it may be useful to clarify that it gives access to any role up to a user's highest.
-
Just ran into the same problem today. The subtext for "Manage Roles" states "roles lower than this one." This, in the subtext, is referring to the current role, so I think this is a bug or poor wording.
0
Zaloguj się, aby dodać komentarz.
Komentarze
Komentarze: 1