panel icon indicating copy to clipboard operation
panel copied to clipboard

Missing permission checks on create server page

Open parataku opened this issue 7 months ago • 0 comments

Current Behavior

The create server page does not respect some of the permissions defined on the roles.

  • User can VIEW all users in the owner combo-box without having the User List View / View permission.
  • User can CREATE a new user via the + button next to the combo-box without having the User Create permission.

Expected Behavior

The create server page should respect the permissions assigned to the user.

Steps to Reproduce

1.) Create a role that has none of the User permissions 2.) Assign this role to a user 3.) Open create server page with this user

Panel Version

v1.0.0-beta21

Wings Version

1.0.0-beta13

Games and/or Eggs Affected

No response

Docker Image

No response

Error Logs


Is there an existing issue for this?

  • [x] I have searched the existing issues before opening this issue.
  • [x] I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server.
  • [x] I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.

parataku avatar May 24 '25 18:05 parataku