Untrusted players can trigger redstone with torches in comparators.

[ch4ika]

Server Implementation

Paper

Server Version

1.20.2

Describe the bug

An untrusted player can trigger a redstone signal by placing a redstone torch into machines with comparators.

To Reproduce

1. Build the machine as shown in the picture.
2. It is important that there is an item in the chest.
3. A player who has no rights to the plot needs a redstone torch.
4. And now the untrusted player can place the torch on one of the purple wool blocks and trigger this machine.

Expected behaviour

Redstone should not be triggered by other untrusted players.

Screenshots / Videos

Error log (if applicable)

No response

Plot Debugpaste

https://athion.net/ISPaster/paste/view/9d58ea13a2b5424b84a45a556533e43e

PlotSquared Version

7.0.0-rc.4-Premium

Checklist

• [X] I have included a Plot debugpaste.
• [X] I am using the newest build from https://www.spigotmc.org/resources/77506/ and the issue still persists.

Anything else?

No response

[OneLiteFeather]

Hello, can you update to latest plotsquared and retry please?

[ch4ika]

Still on 7.1.0-Premium

[OneLiteFeather]

Can reproduce it, it works because the redstone torch can trigger the update chain of minecraft. It is an indirect block update and triggers the redstone comparator. Important to reproduce: use a trapped chest.

[RedstoneFuture]

Same on a 1.19.4 server. The problem occurs only with BUDs (Block Update Detectors). WorldGuard does not prevent the case either. The problem has existed for some time. This may not be fixable with a simple event listener cancel.

[dordsor21]

If it's also an issue with WorldGuard I'm assuming there's definitely no easy solution we can add to P2 either tbh

[Tamikaschu]

This Issue can be closed due to it being fixed by paper

[RedstoneFuture]

This Issue can be closed due to it being fixed by paper

Thank you! We should still test it before we close it here.