Page 1 of 1

[0.16.22] Pasting entity settings don't respect permissions

Posted: Sat Feb 10, 2018 12:14 pm
by Progman
When you have the "Paste entity settings" permission you can use it to bypass individual permissions on an entity. As an example you might not have the "Set priority splitter" permission to change the splitter priorities, but you can change it anyway when you copy/paste the entity settings from another splitter. This affects at least the permissions "Set priority splitter", "Select item" and "Setup assembling machine".

Pasting the entity setting should respect the individual permissions which prevented you to do the changes on an entity in the first place. You obviously can remove the "Paste entity settings" permissions, but that is a powerful feature you usually don't want to remove.

Reproduce with:
  • Build two spltters
  • Set priority configuration on one splitter
  • Remove the "Set priority splitter" from your permissions, but keep the "Paste entity setting".
  • Change the priority settings from the second splitter. The configuration isn't saved since you don't have permissions.
  • Copy/Paste the entity settings from one splitter to the other.
Now you have changed the priority on the splitter without the permission to do so.

Re: [0.16.22] Pasting entity settings don't respect permissions

Posted: Sat Feb 10, 2018 1:14 pm
by posila
Hi, the permission system is a simple attempt to help alleviate pain with hosting a game open to strangers. The system is not aware of meaning of the actions nor their context. See response from Rseding here: viewtopic.php?f=6&t=56757#p341124