Users with the "Manage Roles" permission should not be able to change the per-channel permissions of other users with the same role or higher

Commenti

2 commenti

  • wiresegal

    Bumping this; privilege escalation is definitely not a thing which should be allowed. Manage Channel should give this permission, not Manage Roles, because you can give yourself Manage Channel for that channel with this exploit.

    1
    Azioni per commenti Permalink
  • poisonedwaters

    I agree. I would like to see the permissions be more granular.

    0
    Azioni per commenti Permalink

Accedi per aggiungere un commento.