Noderestrictions apply not everywhere #347

Closed
opened 2026-02-04 17:40:47 +03:00 by OVERLORD · 4 comments
Owner

Originally created by @Dreamtrailtv on GitHub (May 24, 2025).

Originally assigned to: @Boy132 on GitHub.

Current Behavior

If I create a Role with noderestrictions, the user with the role can still access all servers, even those that are not on this node.

Expected Behavior

The User can only see the servers thats on the node.
And i guess its better to see only node specific resources
On resources that not related to nodes they can see every setting if they have the right permissions

Steps to Reproduce

  • Create a Role with Noderestrictions
  • Apply this role to one User
  • login with this user and control every server on all nodes

Panel Version

1.0.0-beta21

Wings Version

1.0.0-beta13

Games and/or Eggs Affected

No response

Docker Image

No response

Error Logs


Is there an existing issue for this?

  • I have searched the existing issues before opening this issue.
  • I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server.
  • I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.
Originally created by @Dreamtrailtv on GitHub (May 24, 2025). Originally assigned to: @Boy132 on GitHub. ### Current Behavior If I create a Role with noderestrictions, the user with the role can still access all servers, even those that are not on this node. ### Expected Behavior The User can only see the servers thats on the node. And i guess its better to see only node specific resources On resources that not related to nodes they can see every setting if they have the right permissions ### Steps to Reproduce - Create a Role with Noderestrictions - Apply this role to one User - login with this user and control every server on all nodes ### Panel Version 1.0.0-beta21 ### Wings Version 1.0.0-beta13 ### Games and/or Eggs Affected _No response_ ### Docker Image _No response_ ### Error Logs ```bash ``` ### Is there an existing issue for this? - [x] I have searched the existing issues before opening this issue. - [x] I have provided all relevant details, including the specific game and Docker images I am using if this issue is related to running a server. - [x] I have checked in the Discord server and believe this is a bug with the software, and not a configuration issue with my specific system.
Author
Owner

@Boy132 commented on GitHub (May 24, 2025):

Can't reproduce that. (created a second node, created a role that only has access to this node, assigned that role to a new user, checked servers and the servers from the first node are not visible)

@Boy132 commented on GitHub (May 24, 2025): Can't reproduce that. (created a second node, created a role that only has access to this node, assigned that role to a new user, checked servers and the servers from the first node are not visible)
Author
Owner

@Dreamtrailtv commented on GitHub (May 24, 2025):

Image
all on Node 1

Image

Image

Image

@Dreamtrailtv commented on GitHub (May 24, 2025): ![Image](https://github.com/user-attachments/assets/42e811af-ff62-4210-a32d-edcb6ece9483) all on Node 1 ![Image](https://github.com/user-attachments/assets/291a1c28-89ed-40d8-bacc-ca739677c339) ![Image](https://github.com/user-attachments/assets/f4f4000e-8d05-4e67-842f-85da776a0f13) ![Image](https://github.com/user-attachments/assets/95f0992d-5be7-453d-96b3-eefe54894ecc)
Author
Owner

@Boy132 commented on GitHub (May 24, 2025):

So, is that only on the client side? Do all the servers also show in the admin area?

@Boy132 commented on GitHub (May 24, 2025): So, is that only on the client side? Do all the servers also show in the admin area?
Author
Owner

@parataku commented on GitHub (May 24, 2025):

Just wanted to open an issue for exactly the same thing...

I can reproduce this, and from what i can see this is limited to the client side only. The backend/admin behaves as expected.
And its not just the server showing up, its also that the user can then do pretty much all client side operations against said server.

@parataku commented on GitHub (May 24, 2025): Just wanted to open an issue for exactly the same thing... I can reproduce this, and from what i can see this is limited to the client side only. The backend/admin behaves as expected. And its not just the server showing up, its also that the user can then do pretty much all client side operations against said server.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/panel#347