Skip to content
This repository has been archived by the owner on Feb 3, 2024. It is now read-only.

"su mode"/temporarily act from the perspective of a different subject #3026

Open
zml2008 opened this issue Aug 21, 2019 · 0 comments
Open

"su mode"/temporarily act from the perspective of a different subject #3026

zml2008 opened this issue Aug 21, 2019 · 0 comments

Comments

@zml2008
Copy link
Member

zml2008 commented Aug 21, 2019

Allow a command executor to be able to preview what permissions they'd have working from the perspective of a different subject.

I'm thinking of this as a testing feature, though input on how this would be useful in gameplay would be appreciated as well and could lead to expansions of this feature.

Things to consider:

  • su-ing to a role with higher permissions, is it worthwhile trying to restrict that?
  • how to handle writes to the original subject in "su mode" -- proxy as well, block, or write to the original subject?
  • perhaps we check the inheritance tree of the targeted subject, and block su-ing if the original subject has su permission explicitly denied for any of the subject's parents
  • some indication/audit logging of these changes?
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant