TS3 Client 3.0.6 // Server 3.0.5 - Channel Permission

[dreign]

Hey Guys,





since the Update to Server 3.0.5 we experience a strange bug on our TS3 Server. What we did (and it was working very well) is the following:

We created 7 Server Groups: Server Admin, Orga, Staff Member, Trial, Normal and Guest.

We wanted Orga & Staff to be able to set a password and change the channel description. In case of a war, for example, an Orga & Staff Server Group Member could set a password and change the channel description to "war against ..xyz.. - please do not disturb".

Of course most of our channels must not have a password at all.



So we gave the Orga & Staff Server Group the following permissions:
b_channel_modify_description
b_channel_modify_password

After this, we went through every channel on our TS3-Server and configured the channel rights.
War channels got b_channel_modify_description, b_channel_modify_password enabled, all the other channels got those two rights revoked.

Before Update 3.0.5 this worked fine for us.
Only Orga & Staff Server Group Members could change channel passwords and they could only change the passwords of the war channels. They were not able to set passwords to all the other channels.



After Update 3.0.5 we experienced the following Bug:
The Orga & Staff Server Group could not change the channel passwords of the war channels anymore. The Permissions were exactly the same (we even tried a BackUp).

We never used the Channel Group Permissions. All our TS3-Server Users got the "Guests" Channel Group.
In every Channel Group, including the "Guests" Channel Group, we did not set a single right. All Permissions are grey'ed.

When we now set b_channel_modify_description, b_channel_modify_password for example in the "Guests" Channel Group, the Orga & Staff Server Group Member can change the channels passwords of the war channels again but there is a major bug: If we set those permissions in the "Guests" Channel Group, the Channel Group permissions overwrite the Channel permissions.
Means the following: although in every channel b_channel_modify_description, b_channel_modify_password is revoked (except of the war channels) the Orga & Staff Server Group Members can set passwords to every channel now.



So the Bug does the following:

If no Channel Group Permissions are set, Channel Permissions (although set) are ignored.
If Channel Group Permissions are set, Channel Permissions (although set) are overwritten.

As to now we only experienced the bug with b_channel_modify_description, b_channel_modify_password and over channel modifying permissions. We did not notice such or similiar bugs with Sub-Channel creating or the File Browser or something else..

Any ideas?^^





greetings,

dreign

[SilentStorm]

If Channel Group Permissions are set Channel Permission WILL get overwritten. Thats just how the Permission System works and is intended.

Channel Client Permissions (Permissions specific to a single Client in a single Channel) overwrite all previously set Permissions if any are set.
Channel Group Permissions overwrite all but Channel Client Permissions if any are set.
Channel Permissions overwrite Client Permissions and Server Group permissions.
Client Permissions overwrite Server Group Permissions.


Just take a look into permissiondoc.txt inside the doc Folder of your Server Installation for a more detailed explanation.


Also your Permission Setup seems flawed, since you set the modify_password and modify_description as a Channel permission EVERYONE inside that channel could edit the Password and Description of those Channels!

The proper way to achieve what you want would be to create a Channelgroup with b_channel_modify_description, b_channel_modify_password, b_group_is_permanent and i_group_needed_member_add_power = 75. Then give this Channelgroup to anyone who should be able to change the PW and Description in all Channels where (s)he should be able to edit the password.

While it is possible to achieve this goal with just using Servergroups it is rather troublesome and you are likely to miss something. This is because with Servergroups you allow something to be done globally on the entire Server and then would need to use Permissions later down the line to forbid the exact same thing you first allowed in all but a few Channels, including any newly created ones. You will extremely likely be forgetting quite a few, so I'd definitely recommend using a Channelgroup for this.

[dreign]

First of all: Thank you VERY MUCH for your answer!!

If Channel Group Permissions are set Channel Permission WILL get overwritten. Thats just how the Permission System works and is intended.

Yes, but the thing is that we have NOT set ANY Channel Group Permissions - still the not set Channel Group Permissions deny our individual Channel Permissions to work -.-"

If no Channel Group Permissions are set, Channel Permissions (although set) are ignored.

Like this:
Channel Modify Power (&Needed Modify) is not set ( Server Group, Channel Permissions, Channel Group )
Change Channel Password is allowed (Server Group, Channel Permissions)
Change Channel Password is not set (Channel Group)

Specific Channel still refuses to change its password.

After allowing Set Channel Password (Channel Group) specific Channel no longer refuses to change its password.
So it is the NOT SET "change channel password" of the Channel Group which denies the process..

Also your Permission Setup seems flawed, since you set the modify_password and modify_description as a Channel permission EVERYONE inside that channel could edit the Password and Description of those Channels!

Yep, we wanted to prevent this by disallowing all Server Groups lower than Staff to set or change those permissions..

You will extremely likely be forgetting quite a few, so I'd definitely recommend using a Channelgroup for this.

Could be...in the meantime I edited all Channels which should never be edited by anyone lower than Server Admin and gave those an i_channel_needed_modify_power of 75. All other Channels which should be edited got an i_channel_needed_modify_power of 50 (Staff) or 60 (Orga).
Server Groups lower than Server Admin now also got a channel modify power set by us.

Now it works fine, again.

However, using Channel Groups is no proper solution for us because we have many members and would have to assign billions of Channel Groups to all of them.
Allowing the Server Group Staff and Orga to edit some of the things in specific Channels works better because we do not have much changes to our channel structure. So we can specify which channels should never be touched (except of an Server Admin) and which should by any Staff or Orga Member and we never have to check if any Orga or Staff Member has a channel group in a specific channel.
We just assign a new Orga the Server Group Orga and instantly now that he has all the permissions he needs.