Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

When supybot.capabilities.default is False, giving "Plugin.command" should be enough to allow a command #1321

Open
progval opened this issue Jan 6, 2018 · 4 comments
Open

When supybot.capabilities.default is False, giving "Plugin.command" should be enough to allow a command #1321

progval opened this issue Jan 6, 2018 · 4 comments
Labels
Bug Feature request security/DoS

Comments

@progval
Copy link
Owner

progval commented Jan 6, 2018

As of now, a user should also get the "Plugin" and "command" capabilities to be allowed to run it.
@progval
Copy link
Owner Author

progval commented Jan 6, 2018

note that if supybot.capabilities.default is True, then only giving -whoami or -User should disable it

@progval
Copy link
Owner Author

progval commented Jan 6, 2018

Maybe introduce a config variable to switch between the current behavior and this new one?

@progval
Copy link
Owner Author

progval commented Feb 21, 2018

Fixed in 636712b.

@progval progval closed this as completed Feb 21, 2018
@progval progval reopened this Feb 21, 2018
@progval
Copy link
Owner Author

progval commented Feb 21, 2018

actually, no, it isn't

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Bug Feature request security/DoS
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@progval