Do not allow members with Manage Channels/Roles to grant permissions they don't have to themselves or others

Hexcede

• 2021年02月02日 15:56

Members with the ability to change channel permissions can currently grant permissions to themselves and others that they don't have, for example, the ability to mention everyone, or send TTS messages.

This should not be the case. If a member does not have the ability to mention everyone, but they have the ability to give themselves the perm anyway, it completely defeats the purpose of some permissions.

I believe this is also the case with roles as well as far as I am aware.

Members simply should not be able to give themselves permissions they don't have under any context, just like how they already can't deny permissions they do have.

-1

• 

  R E G E X

  • 2021年02月04日 13:26

  That's literally the purpose for Manage Channels/Roles. If you don't trust your Moderators with these permissions, don't give them these permissions. 

  0

請登入寫評論。