Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Giving anyone roles on any guild without permissions #7

Closed
Lennyy1337 opened this issue May 5, 2021 · 1 comment
Closed

Giving anyone roles on any guild without permissions #7

Lennyy1337 opened this issue May 5, 2021 · 1 comment

Comments

@Lennyy1337
Copy link

Describe the bug
Anyone can give himself any roles on any guild. For example, on the accord.app support guild I gave myself mod.

To Reproduce
Steps to reproduce the behavior:

  1. Go to a guild
  2. Click on any user
  3. You can give him roles

Expected behavior
You can't give roles out without permsissions

Screenshots
https://ibb.co/0qshs82
Desktop (please complete the following information):

  • OS: Windows 10
  • Browser: Opera GX
  • Version: 75.0.3969.259

Additional context
Anyone can give himself the mod/admin role, and has perms to kick/ban

@theADAMJR
Copy link
Owner

Role management has been tweaked for next update.
I believe this was a visual bug with the website as the API checks permissions of the manager before giving roles.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants