Page MenuHomeSchine - Phabricator

Starmade | Admins can't bypass edit-restrictions on factioned stations
Closed, RejectedPublic

Description

If you are a server's admin, you should be able to bypass a faction's edit-restriction on their stations, as the attached popup message displays.
This is not the case. To reproduce:

  • be an admin
  • find a station, which is owned by a faction[preferably a faction of a player], of which you are not a member.
  • attempt to manually remove a block from said station in astronaut mode(preferably with permission from the station-owner)
  • observe, as the block won't be removed, and 2 popup messages appear, one detailing how you don't have the required permissions, but that your admin status overrides that, and the other detailing, that you don't have the required permissions.

This also prevents admins from opening/closing doors or activating lifts, or any logic for that matter. The admin can still grant themselves the permission by joining the faction through admin-command, and then promoting themselves, however I don't think that is the intended behaviour, or if it is, that the popup message should be changed.

Details

Task Type
Bug
Testing Results
Affected Gamemode(s)
Multiplayer
Reproducible
Yes
Last tested (version)
0.19482
Category
Engine
Hardware/Software/System
OS-Specific
No
Hardware-Specific
No
Video Card Vendor
uncertain
Serverconfig (server.cfg)

Testserver

Event Timeline

Megacrafter127 changed Category from none/unspecified to Engine.
Megacrafter127 changed Affected Gamemode(s) from none/unspecified to Multiplayer.
Megacrafter127 changed Reproducible from uncertain to Yes.
Megacrafter127 set Last tested (version) to 0.19482.
Megacrafter127 edited Serverconfig (server.cfg). (Show Details)
Megacrafter127 edited Clientconfig (settings.cfg). (Show Details)
Megacrafter127 added a subscriber: Megacrafter127.
Megacrafter127 created this task.
Megacrafter127 raised the priority of this task from to Needs Triage/Unclassed.
Restricted Application added a project: Issue Navigation. · View Herald TranscriptNov 6 2015, 9:48 PM
AndyP added a subscriber: AndyP.Nov 7 2015, 11:16 AM
AndyP claimed this task.

This is intended behaviour.

An admin should NOT be able to alter anything they are not meant to, without dropping at least a log message.
(force join a faction -> admin command -> searchable)

They are meant to be in-game moderators and not "unlimited powers" account.
This way, you can add an admin without needing to worry about any single block in the world being modified, users complaining about that, and you have a 15 people admin team and no clue who may have abused your trust.
Anything especially Homebase related stuff changed by admins results in rumors about exploits and possible cheats, which will under the line not only harm the server-owners reputation but for starmade.
This way, the owner has to get the logs, and search for all admin commands, when there is a force join to faction xxxx its most likely the admin that joined there did the modification, otherwise the owner can clearly self-investigate:
This was no action done by the admin team -> should be an exploit/bug and report it to us

Back when it worked we had a few cases where we had to chase an "exploit" on a single server that was used over and over again, resulting wasted hours, because one of the admins wanted to make fun of one player. With cutting this option to "edit uneditable stuff with log entry only" this never happened again.

AndyP shifted this object from the S1 Public space to the S3 Starmade space.Nov 7 2015, 11:16 AM
AndyP changed the visibility from "Custom Policy" to "Public (No Login Required)".
AndyP changed the edit policy from "Task Author" to "Starmade (Project)".
AndyP set Task Type to Bug.
AndyP set OS-Specific to No.
AndyP set Hardware-Specific to No.
AndyP set Video Card Vendor to uncertain.
AndyP closed this task as Rejected.
Restricted Application edited projects, added Starmade; removed Issue Navigation. · View Herald TranscriptNov 7 2015, 11:17 AM
Restricted Application removed a subscriber: AndyP. · View Herald Transcript
Restricted Application added a project: Engine. · View Herald TranscriptMar 10 2017, 6:23 PM