Olyno/skent

Security improvement: control effect commands

Opened this issue · 1 comments

Describe your idea

Add ability to make Skent syntaxes to not work in Effect Commands

because Skent is much more dangerous than other addons, as they usually can't do truly harmful stuff without access to the file system, but Skent has full access to the file system to which the user which ran the minecraft server has.

so it'd be great to be able to disable effect commands for skent addon only to improve security, so no-one be able to delete your files from in-game, as in-game exploits are much more common (getting OP unexpectedly for example)

while effect commands can be made to require a specific permission in Skript config, an user with OP access can add this permission to themselves, unless there is additional security involved

Olyno commented

Closing this due to missing information. Feel free to add more.