Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ability to add admins in irc #886

Closed
stopspazzing opened this issue Sep 12, 2015 · 8 comments
Closed

Ability to add admins in irc #886

stopspazzing opened this issue Sep 12, 2015 · 8 comments
Labels
Declined Requests that will not be implemented for technical or project direction reasons Feature

Comments

@stopspazzing
Copy link
Contributor

There currently is no way to add admins to the config file without manually editing the file and adding them. A simple:

.admins add NICK
.admins remove NICK

would be awesome. Also should be restricted to owner only for obvious reasons.

@dgw
Copy link
Member

dgw commented Sep 12, 2015

Actually, once .set is fixed to work with list-type settings again, you can do .set admins to get the current list, and e.g. .set admins adminnick,anotheradmin,adminnumber3 to update it, then .save. As I recall, settings changed with .set do take effect immediately.

@stopspazzing
Copy link
Contributor Author

Sounds like a good idea. But set doesn't let you change it? or do you have to redefine the whole list to change 1 item?

@dgw
Copy link
Member

dgw commented Sep 12, 2015

The way .set works now, yes, you have to redefine the whole list. Now that config options have types, someone feeling adventurous could implement adding/removing list items and other goodies.

@stopspazzing
Copy link
Contributor Author

foreach (name in adminslist) 
    if name == args[0]
        adminslist.remove('name')

@elad661
Copy link
Contributor

elad661 commented Sep 12, 2015

This (and .set too) is a bad idea

@embolalia
Copy link
Contributor

Yeah, changing the confg from IRC, with the current state of auth, is probably not something we should have. This is a blatantly obvious privilege escalation vuln. account-tag will change that, but currently no ircds actually implement it. I've filed #888 to implement support for that. I'll leave this open, but I don't think it's worthwhile to put any more attention into the usability of something this dangerous until it's done.

When it does come time to do this, it should be more general append/remove support for list items.

@Exirel
Copy link
Contributor

Exirel commented Jan 12, 2019

As I've to maintain a server, I totally agree with @elad661 and @embolalia, it's scary!

@dgw dgw added Declined Requests that will not be implemented for technical or project direction reasons and removed Low Priority labels Jan 12, 2019
@dgw dgw closed this as completed Jan 12, 2019
@dgw
Copy link
Member

dgw commented Jan 12, 2019

#1385 fixed the issue with .set handling spaces. An .admins command isn't going to happen, though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Declined Requests that will not be implemented for technical or project direction reasons Feature
Projects
None yet
Development

No branches or pull requests

5 participants