Do not allow members with Manage Channels/Roles to grant permissions they don't have to themselves or others

Hexcede

Members with the ability to change channel permissions can currently grant permissions to themselves and others that they don't have, for example, the ability to mention everyone, or send TTS messages.

This should not be the case. If a member does not have the ability to mention everyone, but they have the ability to give themselves the perm anyway, it completely defeats the purpose of some permissions.

I believe this is also the case with roles as well as far as I am aware.

Members simply should not be able to give themselves permissions they don't have under any context, just like how they already can't deny permissions they do have.

-1

Kommentarer

1 kommentar

Datum Röster
  • R E G E X

    That's literally the purpose for Manage Channels/Roles. If you don't trust your Moderators with these permissions, don't give them these permissions. 

    0

Du måste logga in om du vill lämna en kommentar.