Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Tickets] Anyone can run setup #44

Open
Sandvich opened this issue Apr 20, 2021 · 0 comments
Open

[Tickets] Anyone can run setup #44

Sandvich opened this issue Apr 20, 2021 · 0 comments

Comments

@Sandvich
Copy link

Sandvich commented Apr 20, 2021

The ticket setup command has no limits on who can run the command. Ideally this should be limited to server admin.

Edited to add:
This is a potential security/privacy issue as the new roles and channels override the old ones. Also, inconvenient because there's a max limit on roles and channels, which could quickly be reached if a malicious user kept running the setup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant