IntellectualSites / IntellectualSites/PlotSquared

Players can use WorldEdit outside their plots without plots.worldedit.bypass permission.

Open
#4,938 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Requires Testing
Dominant language
Java
Stars
653
Forks
975
Avg merge
2m
Merged PRs (30d)
6

Description

Server Implementation

Paper

Server Version

26.2

Describe the bug

Players who don't have the plots.worldedit.bypass permission, or even when it's set to false, can still use WorldEdit outside their plots. FAWE edits are restricted as well when doing so. This makes it so they can go on other players' plots to make edits, for example by copying a structure on their own plot and pasting it inside another plot.

To Reproduce

Have a player with a rank without the plots.worldedit.bypass permission, or have the permission set to false. Then, copy a structure inside your own plot. After that, go to another player's plot and paste the structure there.

Expected behaviour

WorldEdit should not be able to be used outside the player's plot.

Screenshots / Videos

No response

Error log (if applicable)

No response

Plot Debugpaste

https://athion.net/ISPaster/paste/view/febeda4639b74aafa24d2465f5b20897

PlotSquared Version

Plotsquared version 7.6.0-Premium

Checklist
Anything else?

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the issue on Paper 26.2 with PlotSquared 7.6.0-Premium, using the described copy-and-paste steps. Start by tracing the WorldEdit and FAWE integration around the plots.worldedit.bypass permission; done means edits outside another player's plot are blocked without that permission and remain available with it.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authorization, backend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.