Lodestone-Team/lodestone

A Proper Implementation of Safe Mode

CheatCod opened this issue · 0 comments

Description

Need a proper implementation and documentation for Safe Mode. Safe Mode should aim to reduce or eliminate the possibility of remote code execution by a non-owner user.

When Safe Mode is enabled, it

  • Disables granting, and removes all "unsafe" permissions such as global fs read, instance fs write from users

  • Disable non-owner users from performing "unsafe actions"

  • Implementation in the backend

  • Implementation in the frontend

    • Should pop up with warnings when the owner tries to disable safe mode
  • Write documentation explaining what Safe Mode is