Permission bypass: players with zmenu.use can open the config settings dialog

[albert4719]

Permission bypass: players with zmenu.use can open the config settings dialog

Description

Any player holding the zmenu.use permission can open the zMenu config settings dialog by running /zmenu d config zMenu. There is currently no separate permission node to gate or disable this, so regular players can reach a configuration UI that should be admin-only.

Steps to reproduce

1. Grant a regular player the zmenu.use permission
2. Have that player run /zmenu d config zMenu
3. The config settings dialog opens successfully

Expected behavior

• Opening the config settings dialog should be gated by a dedicated permission node (e.g. zmenu.dialog.config or similar)
• Players with only zmenu.use should not be able to access the configuration UI
• Server owners should be able to disable this feature by removing that dedicated permission

Actual behavior

zmenu.use alone grants access to the config settings dialog, with no way to turn it off separately.