lodestone
lodestone copied to clipboard
A Proper Implementation of Safe Mode
Description
Need a proper implementation and documentation for Safe Mode. Safe Mode should aim to reduce or eliminate the possibility of remote code execution by a non-owner user.
When Safe Mode is enabled, it
-
Disables granting, and removes all "unsafe" permissions such as global fs read, instance fs write from users
-
Disable non-owner users from performing "unsafe actions"
-
[ ] Implementation in the backend
-
[ ] Implementation in the frontend
- [ ] Should pop up with warnings when the owner tries to disable safe mode
-
[ ] Write documentation explaining what Safe Mode is