admins can activate modify_maxclients

[GoNz0]

im a little stuck here, the default serveramdin group has b_virtualserver_modify_maxclients removed with no grant permission but they can click on it and activate it.

i thought without grant permission this was not possible ?

how do i get around it ?

[GoNz0]

i found the permissions b_permission_modify_power_ignore was enabled!

is there any way i can make sure this is removed from all groups except group 2 ?

[poisonpanik]

right click->remove it from any group you don't want to have it. How did it get enabled in the first place?

[GoNz0]

no idea, i must have done it at some stage

i got sent this but theres an error it wont run.

DELETE FROM perm_server_group WHERE perm = "b_permission_modify_power_ignore" AND id1 != 2;

Query Error: no such column: perm Unable to execute statement

DELETE FROM perm_server_group WHERE perm = "b_permission_modify_power_ignore" AND id1 != 2;

[poisonpanik]

You don't want to delete it, just remove it from the groups that should not have it. in my opinion the only group that should have this is your admin server query group.

[GoNz0]

that commands a fast way of removing it from the 500 ish admin groups apart from group 2 thats query admin, and idea why it doesnt work ?

[Screech]

It gave you the error, the column/field name is wrong. Should be perm_id not perm.

[GoNz0]

thanks, one last thing, how can i also remove the grant permissions for it as well ?

[Screech]

I only know how to modify grant permissions within the client, I've not determined what field in the database is used.

[GoNz0]

can you give me an example please?

[florian_fr40]

For all permissions you have a grant permission, with the same name in second part.

You can found it or create it with the first part :
i_needed_modify_power_.......

An example :
You have this permission => b_virtualserver_channel_list

So the grant permission associated is :
i_needed_modify_power_virtualserver_channel_list

If you have set the Grant, this permission is in the database. If not, she doesn't exist in th database.

Now, you can create (INSERT) you can modify the power (UPDATE) or (DELETE FROM )

[GoNz0]

i just did a test on a backup, the last line was a edited command with the value 99

i ran

DELETE FROM perm_server_group WHERE perm_id = "i_needed_modify_power_permission_modify_power_ignore" AND id1 != 2;

and it vanished

thanks for the hints and tips

i think all i need to do now is run the following 3 to stop the grant permissions on the ignore and maxclient leaving out the query admin

DELETE FROM perm_server_group WHERE perm_id = "i_needed_modify_power_permission_modify_power_ignore" AND id1 != 2;
DELETE FROM perm_server_group WHERE perm_id = "i_needed_modify_power_virtualserver_modify_maxclients" AND id1 != 2;
DELETE FROM perm_server_group WHERE perm_id = "i_needed_modify_power_channel_modify_maxclients" AND id1 != 2; 

[Screech]

For all permissions you have a grant permission, with the same name in second part.

You can found it or create it with the first part :
i_needed_modify_power_.......

An example :
You have this permission => b_virtualserver_channel_list

So the grant permission associated is :
i_needed_modify_power_virtualserver_channel_list

If you have set the Grant, this permission is in the database. If not, she doesn't exist in th database.

Now, you can create (INSERT) you can modify the power (UPDATE) or (DELETE FROM )

OK, so they went the least intuitive way possible. An extra perm_id that is not shown in the client with looking at the permissions by name....

[GoNz0]

it does not help does it. a big thanks to all of you for helping

[Screech]

At the very least they could have used the permission name and just append "_grant" to the end so it is easy to work it.