panel
panel copied to clipboard
Missing permission checks on create server page
Current Behavior
The create server page does not respect some of the permissions defined on the roles.
- User can VIEW all users in the owner combo-box without having the User List View / View permission.
- User can CREATE a new user via the + button next to the combo-box without having the User Create permission.
Expected Behavior
The create server page should respect the permissions assigned to the user.
Steps to Reproduce
1.) Create a role that has none of the User permissions 2.) Assign this role to a user 3.) Open create server page with this user
Panel Version
v1.0.0-beta21
Wings Version
1.0.0-beta13
Games and/or Eggs Affected
No response
Docker Image
No response
Error Logs
Is there an existing issue for this?
- [x] I have searched the existing issues before opening this issue.
- [x] I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server.
- [x] I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.