Forum

Results 1 to 4 of 4
  1. #1
    Join Date
    December 2009
    Location
    USA
    Posts
    85

    Solved [solved] Permissions; hacking?

    i noticed in the logs today that someone connected, added themself to one of our custom groups, removed themself from the same group, then left, all in less than one minute. obviously looking for security holes.

    the group they joined has no permissions, so no harm (i use it as a placesetter for uids) so i have their uid but dont see any use for it to diagnose this issue (except it is now banned of course)

    trouble is, how did he do it? i logged in with a fresh id (no permissions) and when i tried the 'right click/set server group' i saw the groups, but they were all greyed out (like they are supposed to be)

    the permissions in this group were very simple:
    i_group_meeded_modify_power 75
    b_group _is_permanent

    After that test, i added i_group_needed_member_add_power 75, but that seems irrelevant if the selections were greyed out - or dont i understand how this works if a permission is missing? in other words, even though it was greyed out, since there was no permission/definition for add/subtract power, is it possible somehow to join that group other than via the right click menu? or what happened in this case, ie how did he do this?

    thanks,

    mark

  2. #2
    Join Date
    December 2009
    Location
    Dublin, Ireland
    Posts
    379
    i_group_needed_member_add_power should always have a value when you make custom groups. the best way to know if you are setting a group up correctly is to compaire it to template groups such as " Normal "

  3. #3
    Join Date
    December 2009
    Location
    Dublin, Ireland
    Posts
    379
    i_group_needed_member_remove_power should have a value too.

  4. #4
    Join Date
    December 2009
    Location
    USA
    Posts
    85
    Quote Originally Posted by azzy101 View Post
    i_group_needed_member_add_power should always have a value when you make custom groups. the best way to know if you are setting a group up correctly is to compaire it to template groups such as " Normal "
    it does now but i didnt even think of it at the time since there are no rights attached to the group, AND the set server groups were all greyed out, so i figured no problem.

    hence the question

    [edit] i just tested a million things to see what might have happened. still no clue, but i did find this out:
    unless the group the user is in has SOME member_add rights granted, the lack of needed_member_add_power is irrelevant to the group in question for that user.
    Last edited by markgm5; August 3rd, 2010 at 08:32 PM.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [solved?] Permissions Help
    By Freds in forum Permission System
    Replies: 1
    Last Post: July 29th, 2010, 01:59 PM
  2. [Solved] Permissions for Channels
    By xcalibur in forum Permission System
    Replies: 8
    Last Post: July 3rd, 2010, 02:43 AM
  3. [Solved] Help Teamspeak 3 Permissions
    By BalAOOO in forum Permission System
    Replies: 2
    Last Post: June 22nd, 2010, 04:07 PM
  4. [solved] Insufficients Permissions
    By R4vER in forum Permission System
    Replies: 3
    Last Post: June 5th, 2010, 09:11 PM
  5. [Solved] Big problem with permissions
    By matrix142 in forum Permission System
    Replies: 9
    Last Post: March 16th, 2010, 06:32 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •