Ulysses

Ulysses Stuff => General Chat & Help and Support => Topic started by: Lolomat on September 29, 2014, 10:38:25 AM

Title: Admins can be banned via Voteban
Post by: Lolomat on September 29, 2014, 10:38:25 AM

Hello Folks,

i have a Problem. I run ULX and ULib in the SVN Version. And somehow, from one day to the next day, there appeared a bug. This bug allows normals Users to voteban Admins. Then i specified !%admin,!%operator,!&donator,!%superadmin for the Voteban/Kick/Gag command itself. This worked for a few days. Then the bug appeared again. I also tried to reinstall the whole ULX and Lib. Didn't help.

Did someone else had this bug before? Or did i something wrong?

Regards,
Lolomat

Title: Re: Admins can be banned via Voteban
Post by: Neku on September 29, 2014, 12:08:08 PM

That's not a bug.

Title: Re: Admins can be banned via Voteban
Post by: Lolomat on September 29, 2014, 02:31:01 PM

What is it then?

Title: Re: Admins can be banned via Voteban
Post by: Zmaster on September 29, 2014, 02:41:23 PM

Quote from: Lolomat on September 29, 2014, 02:31:01 PM

What is it then?

It's just something that they could prevent but didn't
It's not on purpose or on accident
Not a bug
Just...not prevented

Title: Re: Admins can be banned via Voteban
Post by: Neku on September 29, 2014, 04:22:43 PM

If you want to prevent the abuse of Voteban, then limit the amount of time that the target can be banned, say 5-10 minutes.

Title: Re: Admins can be banned via Voteban
Post by: Lolomat on October 01, 2014, 01:06:46 PM

I'm confused.
I thought the can_target is made to "protect" groups from other groups.
If i set !%admin on group user, Group user shouldn't be able to voteban/kick/gag players in group admin. Especially when i also set the same can_target for the command it self. Or did i get something wrong?

Title: Re: Admins can be banned via Voteban
Post by: JamminR on October 01, 2014, 02:32:41 PM

By default, "user" group doesn't have access to ulx voteban for just that reason... it could be abused.
Voteban is intended as a means to allow an admin (default group that has voteban access) to start a voteban to allow users to have their say whether or not anyone should be banned, including other admins/superadmins/higher groups if needed.
Adding the can_target check to voteban would prevent that from happening.

If you have "user" access group abusing voteban privilege, don't allow "user" group to have full access to it.
Give full access to admin or other trusted group only.
Then, if you just must give access to users, restrict the time allowed as indicated.

If you're having issue with ALL the vote commands, then you have an inheritance tree issue somewhere in your groups, and while an affected group member is connected to the server, need to attach the file created from the server console command "ulx debuginfo" to your next post.