starred/panel-pelican-dev
1
0
Fork 0
mirror of https://github.com/pelican-dev/panel.git synced 2026-05-04 18:00:48 +03:00
Code Issues 41 Packages Projects Releases 10 Wiki Activity

Admin Role Users Without Permission Can Change Primary Allocation #160

New Issue
Closed
opened 2026-02-05 17:12:44 +03:00 by OVERLORD · 1 comment
OVERLORD commented 2026-02-05 17:12:44 +03:00
Owner
Copy Link

Originally created by @FordCorn on GitHub (Oct 2, 2024).

Current Behavior

Users given an admin role that only allows servers to be viewed are still able to change the primary allocation even without permission.

Extra info: the user itself is also not able to add, remove, or modify current allocations on the server either, only view.

Expected Behavior

The user should not be able to change the default allocation without the permission to change allocations on a server.

Steps to Reproduce

Create a user role in the admin panel and give it server view permissions, log in as said user and look at the servers page, the user is able to change the primary allocation even though they do not have the required permissions to do so, or if this is even intended.

Panel Version

1.0.0-beta10

Wings Version

1.0.0-beta5

Games and/or Eggs Affected

Minecraft (Fabric)

Docker Image

ghcr.io/parkervcp/yolks:java_21

Error Logs

No response

Is there an existing issue for this?

  • I have searched the existing issues before opening this issue.
  • I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server.
  • I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.
Originally created by @FordCorn on GitHub (Oct 2, 2024). ### Current Behavior Users given an admin role that only allows servers to be viewed are still able to change the primary allocation even without permission. Extra info: the user itself is also not able to add, remove, or modify current allocations on the server either, only view. ### Expected Behavior The user should not be able to change the default allocation without the permission to change allocations on a server. ### Steps to Reproduce Create a user role in the admin panel and give it server view permissions, log in as said user and look at the servers page, the user is able to change the primary allocation even though they do not have the required permissions to do so, or if this is even intended. ### Panel Version 1.0.0-beta10 ### Wings Version 1.0.0-beta5 ### Games and/or Eggs Affected Minecraft (Fabric) ### Docker Image ghcr.io/parkervcp/yolks:java_21 ### Error Logs _No response_ ### Is there an existing issue for this? - [X] I have searched the existing issues before opening this issue. - [X] I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server. - [X] I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.
OVERLORD added the 🟢 easy label 2026-02-05 17:12:44 +03:00
OVERLORD commented 2026-02-05 17:12:48 +03:00
Author
Owner
Copy Link

@rmartinoscar commented on GitHub (Oct 2, 2024):

Hey should be fixed with https://github.com/pelican-dev/panel/pull/601 thanks for your report !

@rmartinoscar commented on GitHub (Oct 2, 2024): Hey should be fixed with https://github.com/pelican-dev/panel/pull/601 thanks for your report !
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
not confirmed
pull-request
Mirrored from GitHub Pull Request
 👑 sponsor
💰 fund
🔴 hard
🟡 medium
🟡 medium
🟡 medium
🟢 easy
🟢 easy
🟢 easy
No Label 🟢 easy
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/panel-pelican-dev#160
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?