IntellectualSites / IntellectualSites/PlotSquared
Players can use WorldEdit outside their plots without plots.worldedit.bypass permission.
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 653
- Forks
- 975
- Avg merge
- 2m
- Merged PRs (30d)
- 6
Description
Server Implementation
Paper
Server Version
26.2
Describe the bug
Players who don't have the plots.worldedit.bypass permission, or even when it's set to false, can still use WorldEdit outside their plots. FAWE edits are restricted as well when doing so. This makes it so they can go on other players' plots to make edits, for example by copying a structure on their own plot and pasting it inside another plot.
To Reproduce
Have a player with a rank without the plots.worldedit.bypass permission, or have the permission set to false. Then, copy a structure inside your own plot. After that, go to another player's plot and paste the structure there.
Expected behaviour
WorldEdit should not be able to be used outside the player's plot.
Screenshots / Videos
No response
Error log (if applicable)
No response
Plot Debugpaste
https://athion.net/ISPaster/paste/view/febeda4639b74aafa24d2465f5b20897
PlotSquared Version
Plotsquared version 7.6.0-Premium
Checklist
- I have included a Plot debugpaste.
- I am using the newest build from https://www.spigotmc.org/resources/77506/ and the issue still persists.
Anything else?
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the issue on Paper 26.2 with PlotSquared 7.6.0-Premium, using the described copy-and-paste steps. Start by tracing the WorldEdit and FAWE integration around the plots.worldedit.bypass permission; done means edits outside another player's plot are blocked without that permission and remain available with it.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 58/100