FTB-Modpack-Issues icon indicating copy to clipboard operation
FTB-Modpack-Issues copied to clipboard

Non-OP Altering KubeJS Stages

Open KittenIsLive opened this issue 2 years ago • 0 comments

Modpack

FTB Arcanum Institute

Modpack version

1.3.0

Log Files

No response

Describe the bug

Anyone is able to use the command /kubejs stages in order to grant or remove stages from themselves, or even anyone else on a multiplayer server without needing OP permissions. This can make it so you can rob someone of a stage like codex_final so they can't reach the final boss anymore, or give stages like stage_fire or stage_water to forcibly change their cosmetic armor.

Steps to reproduce

  1. Go onto a multiplayer server without OP
  2. Use /kubejs stages <add/remove> <player> <stage> to add or remove a stage from a player
  3. Also can use /kubejs stages list to check what stages someone else has to know what to remove from them

Expected behaviour

KubeJS commands should not be usable by non-OP players

Screenshots

No response

Additional information

No response

KittenIsLive avatar Jan 20 '24 00:01 KittenIsLive