[No Bug] Server groups and Channel groups showing

[}SoC{ Lazer]

Server groups and Channel groups will show to anybody under the Permissions tab, even if they don't have permission to see it. They cannot view clients, or the actual permissions, but they can still open up the window.

[SmokinShark]

Look at the "Info" Permissions.

[dante696]

This is no bug and a wanted behavior.
b_virtualserver_servergroup_list and b_virtualserver_channelgroup_list are checked for Serverquerys only.

[}SoC{ Lazer]

I double checked on a user using his Client Permission Overview, and he does not have either of those permissions assigned from ANY groups, or client prvileges, but he can still view the Server and Channel groups. This did not happen until one of the recent updates. Even guests in the server can see this.

[}SoC{ Lazer]

Here is a direct link if you can't view the attachment: http://i725.photobucket.com/albums/w...ermissions.jpg

If you look at the bottom of the main window, it says he's connected as }SoC{Kyle, and in the Permissions overview window, you can see that you're viewing }SoC{Kyle's permissions. If you look at the filter, he has filtered "b_virtualserver" to show all of the permissions with that in it assigned, and there are only the three. Connecting without a password, view connection info for the server, and use tokens/privelege keys.

However, if you look in the main TS window, he can still click on Server Groups, and Channel groups.

This is my problem. He has no permissions to do this, I've double checked in his Client permissions, Channel Client permissions, Channel permissions, and Channel/Server group permissions. He has none as you can see by the photo, yet he is still able to view these.

I've blurred out everything that you guys don't need to see.

[dante696]

This is no bug and a wanted behavior.
b_virtualserver_servergroup_list and b_virtualserver_channelgroup_list are checked for Serverquerys only.

Let me restate myself!
These permissions are for the Server Query.
The client already knows the groups, when he connects to a server and also without the permission b_virtualserver_channelgroup_list, the user isn't able to assign Channel admin, Voice, Operator.


This is NO bug and NO security risk, when b_virtualserver_client_dblist is disabled for guests and i_group_needed_member_add_power is set in your Group.
Nobody can see group members and add himself into one of these groups.

[}SoC{ Lazer]

Okay, that makes much more sense. It's for the Server Query groups using telnet only, correct?

Perhaps update the permission description to avoid confusion?