A Proper Implementation of Safe Mode
CheatCod opened this issue · 0 comments
CheatCod commented
Description
Need a proper implementation and documentation for Safe Mode. Safe Mode should aim to reduce or eliminate the possibility of remote code execution by a non-owner user.
When Safe Mode is enabled, it
-
Disables granting, and removes all "unsafe" permissions such as global fs read, instance fs write from users
-
Disable non-owner users from performing "unsafe actions"
-
Implementation in the backend
-
Implementation in the frontend
- Should pop up with warnings when the owner tries to disable safe mode
-
Write documentation explaining what Safe Mode is