panel icon indicating copy to clipboard operation
panel copied to clipboard

Noderestrictions apply not everywhere

Open Dreamtrailtv opened this issue 7 months ago • 4 comments

Current Behavior

If I create a Role with noderestrictions, the user with the role can still access all servers, even those that are not on this node.

Expected Behavior

The User can only see the servers thats on the node. And i guess its better to see only node specific resources On resources that not related to nodes they can see every setting if they have the right permissions

Steps to Reproduce

  • Create a Role with Noderestrictions
  • Apply this role to one User
  • login with this user and control every server on all nodes

Panel Version

1.0.0-beta21

Wings Version

1.0.0-beta13

Games and/or Eggs Affected

No response

Docker Image

No response

Error Logs


Is there an existing issue for this?

  • [x] I have searched the existing issues before opening this issue.
  • [x] I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server.
  • [x] I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.

Dreamtrailtv avatar May 24 '25 17:05 Dreamtrailtv

Can't reproduce that. (created a second node, created a role that only has access to this node, assigned that role to a new user, checked servers and the servers from the first node are not visible)

Boy132 avatar May 24 '25 17:05 Boy132

Image all on Node 1

Image

Image

Image

Dreamtrailtv avatar May 24 '25 18:05 Dreamtrailtv

So, is that only on the client side? Do all the servers also show in the admin area?

Boy132 avatar May 24 '25 18:05 Boy132

Just wanted to open an issue for exactly the same thing...

I can reproduce this, and from what i can see this is limited to the client side only. The backend/admin behaves as expected. And its not just the server showing up, its also that the user can then do pretty much all client side operations against said server.

parataku avatar May 24 '25 19:05 parataku