FTB-Modpack-Issues
FTB-Modpack-Issues copied to clipboard
Non-OP Altering KubeJS Stages
Modpack
FTB Arcanum Institute
Modpack version
1.3.0
Log Files
No response
Describe the bug
Anyone is able to use the command /kubejs stages in order to grant or remove stages from themselves, or even anyone else on a multiplayer server without needing OP permissions. This can make it so you can rob someone of a stage like codex_final so they can't reach the final boss anymore, or give stages like stage_fire or stage_water to forcibly change their cosmetic armor.
Steps to reproduce
- Go onto a multiplayer server without OP
- Use
/kubejs stages <add/remove> <player> <stage>to add or remove a stage from a player - Also can use
/kubejs stages listto check what stages someone else has to know what to remove from them
Expected behaviour
KubeJS commands should not be usable by non-OP players
Screenshots
No response
Additional information
No response