find a security fail

[tfoutfou]

Hello Teamspeak team , you made the best voice program ever seen


Only 2 things are bad :

THE MOST IMPORTANT:
When you set on teamspeak webadmin for REGISTERED user the right to "PrivilegeAdminPlayerRegister" the REGISTERED USER AND ONLY REGISTERED not CA or other , can create new user account that are SERVER ADMIN (SA)

see screen
http://membres.lycos.fr/tfoutfouweb/...s_register.jpg

and with the new SA account the user can make bad damage to server
Why the register user can check the box ??
Cant he just create a new REGISTERED ACCOUNT without having the choice to check the SA box ?
Is there a fix ?

THE SECOND THING:
Can you add a volume set for a particular user :

Boost one friend that have a bad mic and lower one that cry all the day


PS : i am french so my english is bad . maybe sometime you will not understand

[Peter]

Well,

AdminRegisterPlayer is (as the name suggests) a admin functionality, that includes the ability to create serveradmins...so if you just want your mates to register _themselves_ then you grant somthing called something like AllowSelfRegisterbyDefault - that way they can register with self->register with server...

About the volume thing: TeamSpeak should be as easy possible to use, meaning the volumes should just "be right", so Im against the tiresome setting of individual volumes, better work on the automatic volume adjusting algorithm the teamspeak client uses to make everybody to be one volume level.

[tfoutfou]

maybe can create a new option PrivilegeRegisteredPlayerRegister

for the volume:
this algorithm is not already used , is it ?

[katkiller]

Originally posted by tfoutfou
[B]Hello Teamspeak team , you made the best voice program ever seen


Only 2 things are bad :

THE MOST IMPORTANT:
When you set on teamspeak webadmin for REGISTERED user the right to "PrivilegeAdminPlayerRegister" the REGISTERED USER AND ONLY REGISTERED not CA or other , can create new user account that are SERVER ADMIN (SA)

see screen
http://membres.lycos.fr/tfoutfouweb/...s_register.jpg

and with the new SA account the user can make bad damage to server
Why the register user can check the box ??
Cant he just create a new REGISTERED ACCOUNT without having the choice to check the SA box ?
Is there a fix ?

Well don't give them that right.

"Just don't do it."

Uncheck "PrivilegeAdminPlayerRegister" and thats your fix.

Don't use it.

[tfoutfou]

I uncheck it since many time , i am not soo stupid LOL

I know i am french damn LOLLLLLLL