channel group permission can controll server group too (client 3.0.6)

[Ahmed]

Hello

after 3.0.6 client update one of my users told me that he can add/remove users to the "normal" server group he only needs "channel admin" in any channel

so we did some testing and found out that:
channel groups with the permission "i_group_member_add_power" and "i_group_member_remove_power" can effect server groups too

so by default the channel admin have i_group_member_add_power and i_group_member_remove_power set to 50

and server group Normal got the i_group_needed_member_add_power and i_group_needed_member_remove_power set to 50 also by default

so any channel admin can add/remove users to server group normal ...

please fix that
thanks

[Jordi]

Channel's permissions and channel groups permissions, overwrite server groups permissions.
To avoid this you must set Skip flag, in the server group permission.

[SilentStorm]

Or Teamspeak could just change their poor choice of Default values

[Ahmed]

i know that i also changed the values for these permissions
but these are the default values only overwritten after the last client update

this never happened before the update ..

[SilentStorm]

Client Updates dont affect the Server's Permission Setup. Only Server updates can affect the permission on the server.

[Ahmed]

then this is completely weird since it only just pop up out of nowhere after today update

[Jordi]

Post permissions overview from that user, when is within the channel, where it's channel admin.

[Ahmed]

here

Server Groups
	Normal (264)
		ServerQuery: View Virtual Server Info 1 0 0
		View Virtual Server Connection Info 1 0 0
		ServerQuery: View List of existing Channels 1 0 0
		ServerQuery: View List of Clients online 1 0 0
		View List of available Privilege Keys 0 0 1
		Create new Privilege Key 0 0 1
		Use Privilege Keys to gain permissions 0 0 1
		Channel Max Depth 5 0 0
		ServerQuery: View Channel Info 1 0 0
		Create Temporary Channels 1 0 0
		Create Channels with Topic 1 0 0
		Create Channels with Description 1 0 0
		Create Channels with Password 1 0 0
		Create Channels with Speex Narrowband (8kHz) Codec 1 0 0
		Create Channels with Speex Wideband (16kHz) Codec 1 0 0
		Create Channels with Speex Ultra-Wideband (32kHz) Codec 1 0 0
		Create Channels with Max Codec Quality 7 0 0
		Create Channel with Minimum Latency Factor 1 0 0
		Create Channels with Max Clients 1 0 0
		Create Channels with Max Family Clients 1 0 0
		CreateChannels with Needed Talk Power 1 0 0
		Channel Modify Power 50 0 0
		Join Permanent Channels 1 0 0
		Join Semi-Permanent Channels 1 0 0
		Join Temporary Channels 1 0 0
		Channel Join Power 50 0 0
		Channel Subscribe Power 50 0 0
		Channel Description View Power 50 0 0
		Icon ID -1305743776 0 0
		Group is Permanent 1 0 0
		Group Auto Update Type 30 0 0
		ServerQuery: View List of Server Groups 1 0 0
		View List of Server Group Members 1 0 0
		ServerQuery: View List of Channel Groups 1 0 0
		View List of Channel Group Members 1 0 0
		Needed Group Modify Power 75 0 0
		Needed Group Member Add Power 60 0 0
		Needed Group Member Remove Power 60 0 0
		Max number of additional connections per Identity 1 0 1
		Max Avatar Filesize (Bytes) 200000 0 0
		Max Channel Subscriptions -1 0 0
		Request talk power in moderated channels 1 0 0
		ServerQuery: View Client Info 1 0 0
		View Client Permission Overview 1 0 0
		View Own Client Permission Overview 1 0 0
		Needed ServerQuery Client View Power 75 0 0
		Needed Client Kick From Server Power 50 0 0
		Needed Client Kick from Channel Power 50 0 0
		Needed Client Ban Power 50 0 0
		Needed Client Move Power 50 0 0
		Client Complain Power 50 0 0
		Needed Client Complain Power 50 0 0
		Private Textmessage Power 50 0 0
		Send Text Messages to Channel 1 0 0
		Send Text Messages to Offline Clients 1 0 0
		Client Poke Power 50 0 0
		File Upload Power 50 0 0
		File Download Power 50 0 0
		File Delete Power 50 0 0
		File Rename Power 50 0 0
		File Browse Power 50 0 0
		Directory Create Power 50 0 0
		Download Quota per Client (MByte) -1 0 0
		Upload Quota per Client (MByte) -1 0 0
	All
		ServerQuery: View Virtual Server Info 1 0 0
		View Virtual Server Connection Info 1 0 0
		ServerQuery: View List of existing Channels 1 0 0
		ServerQuery: View List of Clients online 1 0 0
		View List of available Privilege Keys 0 0 1
		Create new Privilege Key 0 0 1
		Use Privilege Keys to gain permissions 0 0 1
		Channel Max Depth 5 0 0
		ServerQuery: View Channel Info 1 0 0
		Create Temporary Channels 1 0 0
		Create Channels with Topic 1 0 0
		Create Channels with Description 1 0 0
		Create Channels with Password 1 0 0
		Create Channels with Speex Narrowband (8kHz) Codec 1 0 0
		Create Channels with Speex Wideband (16kHz) Codec 1 0 0
		Create Channels with Speex Ultra-Wideband (32kHz) Codec 1 0 0
		Create Channels with Max Codec Quality 7 0 0
		Create Channel with Minimum Latency Factor 1 0 0
		Create Channels with Max Clients 1 0 0
		Create Channels with Max Family Clients 1 0 0
		CreateChannels with Needed Talk Power 1 0 0
		Channel Modify Power 50 0 0
		Join Permanent Channels 1 0 0
		Join Semi-Permanent Channels 1 0 0
		Join Temporary Channels 1 0 0
		Channel Join Power 50 0 0
		Channel Subscribe Power 50 0 0
		Channel Description View Power 50 0 0
		Icon ID -1305743776 0 0
		Group is Permanent 1 0 0
		Group Auto Update Type 30 0 0
		ServerQuery: View List of Server Groups 1 0 0
		View List of Server Group Members 1 0 0
		ServerQuery: View List of Channel Groups 1 0 0
		View List of Channel Group Members 1 0 0
		Needed Group Modify Power 75 0 0
		Needed Group Member Add Power 60 0 0
		Needed Group Member Remove Power 60 0 0
		Max number of additional connections per Identity 1 0 1
		Max Avatar Filesize (Bytes) 200000 0 0
		Max Channel Subscriptions -1 0 0
		Request talk power in moderated channels 1 0 0
		ServerQuery: View Client Info 1 0 0
		View Client Permission Overview 1 0 0
		View Own Client Permission Overview 1 0 0
		Needed ServerQuery Client View Power 75 0 0
		Needed Client Kick From Server Power 50 0 0
		Needed Client Kick from Channel Power 50 0 0
		Needed Client Ban Power 50 0 0
		Needed Client Move Power 50 0 0
		Client Complain Power 50 0 0
		Needed Client Complain Power 50 0 0
		Private Textmessage Power 50 0 0
		Send Text Messages to Channel 1 0 0
		Send Text Messages to Offline Clients 1 0 0
		Client Poke Power 50 0 0
		File Upload Power 50 0 0
		File Download Power 50 0 0
		File Delete Power 50 0 0
		File Rename Power 50 0 0
		File Browse Power 50 0 0
		Directory Create Power 50 0 0
		Download Quota per Client (MByte) -1 0 0
		Upload Quota per Client (MByte) -1 0 0
Client
Channel
	Working !
		Needed Channel Permission Modify Power 0
		Needed Channel Delete Power 50
Channel Groups
	Channel Admin (75)
		Create Channel with Minimum Latency Factor 1
		Change Channel Type to Temporary 1
		Modify Channel Name 1
		Modify Channel Topic 1
		Modify Channel Description 1
		Modify Channel Password 1
		Modify Channel Codec 1
		Modify Channel Codec Quality 1
		Modify Channel Latency Factor 1
		Modify Channel Max Clients 1
		Modify Channel Max Family Clients 1
		Modify Channel Needed Talk Power 1
		Modify Channel Voice Encryption 1
		Delete Semi-Permanent Channels 1
		Delete Temporary Channels 1
		Force Deletion of Channels 1
		Channel Delete Power 50
		Channel Description View Power 50
		Icon ID -595219768
		Group is Permanent 1
		Group Auto Update Type 40
		Needed Group Modify Power 75
		Group Member Add Power 40
		Needed Group Member Add Power 65
		Group Member Remove Power 40
		Needed Group Member Remove Power 65
		Use Channel Commander 1
		Client Kick from Channel Power 50
		Needed Client Kick from Channel Power 50
		Client Move Power 50
		Needed Client Complain Power 25
		Client Talk Power 60
		Grant Talk Power 1
Channel Client
All
	ServerQuery: View Virtual Server Info 1 0 0
	View Virtual Server Connection Info 1 0 0
	ServerQuery: View List of existing Channels 1 0 0
	ServerQuery: View List of Clients online 1 0 0
	View List of available Privilege Keys 0 0 1
	Create new Privilege Key 0 0 1
	Use Privilege Keys to gain permissions 0 0 1
	Channel Max Depth 5 0 0
	Needed Channel Permission Modify Power 0 0 0
	ServerQuery: View Channel Info 1 0 0
	Create Temporary Channels 1 0 0
	Create Channels with Topic 1 0 0
	Create Channels with Description 1 0 0
	Create Channels with Password 1 0 0
	Create Channels with Speex Narrowband (8kHz) Codec 1 0 0
	Create Channels with Speex Wideband (16kHz) Codec 1 0 0
	Create Channels with Speex Ultra-Wideband (32kHz) Codec 1 0 0
	Create Channels with Max Codec Quality 7 0 0
	Create Channel with Minimum Latency Factor 1 0 0
	Create Channels with Max Clients 1 0 0
	Create Channels with Max Family Clients 1 0 0
	CreateChannels with Needed Talk Power 1 0 0
	Change Channel Type to Temporary 1 0 0
	Modify Channel Name 1 0 0
	Modify Channel Topic 1 0 0
	Modify Channel Description 1 0 0
	Modify Channel Password 1 0 0
	Modify Channel Codec 1 0 0
	Modify Channel Codec Quality 1 0 0
	Modify Channel Latency Factor 1 0 0
	Modify Channel Max Clients 1 0 0
	Modify Channel Max Family Clients 1 0 0
	Modify Channel Needed Talk Power 1 0 0
	Channel Modify Power 50 0 0
	Modify Channel Voice Encryption 1 0 0
	Delete Semi-Permanent Channels 1 0 0
	Delete Temporary Channels 1 0 0
	Force Deletion of Channels 1 0 0
	Channel Delete Power 50 0 0
	Needed Channel Delete Power 50 0 0
	Join Permanent Channels 1 0 0
	Join Semi-Permanent Channels 1 0 0
	Join Temporary Channels 1 0 0
	Channel Join Power 50 0 0
	Channel Subscribe Power 50 0 0
	Channel Description View Power 50 0 0
	Icon ID -595219768 0 0
	Group is Permanent 1 0 0
	Group Auto Update Type 40 0 0
	ServerQuery: View List of Server Groups 1 0 0
	View List of Server Group Members 1 0 0
	ServerQuery: View List of Channel Groups 1 0 0
	View List of Channel Group Members 1 0 0
	Needed Group Modify Power 75 0 0
	Group Member Add Power 40 0 0
	Needed Group Member Add Power 65 0 0
	Group Member Remove Power 40 0 0
	Needed Group Member Remove Power 65 0 0
	Max number of additional connections per Identity 1 0 1
	Max Avatar Filesize (Bytes) 200000 0 0
	Max Channel Subscriptions -1 0 0
	Use Channel Commander 1 0 0
	Request talk power in moderated channels 1 0 0
	ServerQuery: View Client Info 1 0 0
	View Client Permission Overview 1 0 0
	View Own Client Permission Overview 1 0 0
	Needed ServerQuery Client View Power 75 0 0
	Needed Client Kick From Server Power 50 0 0
	Client Kick from Channel Power 50 0 0
	Needed Client Kick from Channel Power 50 0 0
	Needed Client Ban Power 50 0 0
	Client Move Power 50 0 0
	Needed Client Move Power 50 0 0
	Client Complain Power 50 0 0
	Needed Client Complain Power 25 0 0
	Private Textmessage Power 50 0 0
	Send Text Messages to Channel 1 0 0
	Send Text Messages to Offline Clients 1 0 0
	Client Talk Power 60 0 0
	Client Poke Power 50 0 0
	Grant Talk Power 1 0 0
	File Upload Power 50 0 0
	File Download Power 50 0 0
	File Delete Power 50 0 0
	File Rename Power 50 0 0
	File Browse Power 50 0 0
	Directory Create Power 50 0 0
	Download Quota per Client (MByte) -1 0 0
	Upload Quota per Client (MByte) -1 0 0

note: Group Member Add Power 40 and Group Member Remove Power 40 both use to be set to 50

[Jordi]

With these permissions, it seems that it isn't possible that your friend, do what you say.

[Ahmed]

that is what am saying dude
when Group Member Add Power and Group Member Remove Power set to the default value 50 he can do it

no one was able to do that before the update
i had to reduce these values to 40 after the update to stop them

[dante696]

What server version is running? And are you 10000000% sure that one of your admins did not change any value here?
The client update does not cause, that server permissions get changed.

[MuhChy]

There was no change for default permission values and certainly it does not come from the client update 3.0.6, especially since clientupdates don't change anything on the serverside.

The default values for Normal and Channeladmin are:

Servergroup:Normal > i_group_needed_member_add_power "60"
Servergroup:Normal > i_group_needed_member_remove_power "60"

Channelgroup:Channel Admin > i_group_member_add_power "50"
Channelgroup:Channel Admin > i_group_needed_member_add_power "50"
Channelgroup:Channel Admin > i_group_needed_member_remove_power "50"

[Alcazar]

In addition, that channel groups like CA can add/remove servergroups if allowed, is possible since the first Beta, so no Bug.