archived-bot icon indicating copy to clipboard operation
archived-bot copied to clipboard

SayCommand is not secure

Open ghost opened this issue 5 years ago • 1 comments

image

  1. I (and he) cannot tag @Community role,
  2. We have the same role

The problem is : Even if the person does not have permission to mention the role, by issuing the command ;;say, if the bot has this permission, it mentions all the people having the role.

If the issue does not seem sufficiently explained to you, tell me.

ghost avatar Aug 25 '20 09:08 ghost

Maybe making it so you cant mention roles/users when using the say command? Or maybe even better, making it so only users with some higher-up permission (ex: MANAGE_MESSAGES) to be able to execute that command.

SpaghettDev avatar Oct 06 '20 17:10 SpaghettDev