From d1a88f0957aeef918af4cea5dcf87892df755130 Mon Sep 17 00:00:00 2001 From: attilamolnar Date: Mon, 1 Apr 2013 01:13:24 +0200 Subject: m_samode Require an oper privilege to change the user modes of other users Issue #417 --- docs/conf/opers.conf.example | 1 + src/modules/m_samode.cpp | 6 ++++++ 2 files changed, 7 insertions(+) diff --git a/docs/conf/opers.conf.example b/docs/conf/opers.conf.example index 1e5abefa5..c62de0e55 100644 --- a/docs/conf/opers.conf.example +++ b/docs/conf/opers.conf.example @@ -24,6 +24,7 @@ # - servers/auspex: allows opers with this priv to see more detail about server information than normal users. # ACTIONS: # - users/mass-message: allows opers with this priv to PRIVMSG and NOTICE to a server mask (e.g. NOTICE $*) + # - users/samode-usermodes: allows opers with this priv to change the user modes of any other user using /SAMODE # - channels/high-join-limit: allows opers with this priv to join total channels instead of total channels. # PERMISSIONS: # - users/flood/no-throttle: allows opers with this priv to send commands without being throttled (*NOTE) diff --git a/src/modules/m_samode.cpp b/src/modules/m_samode.cpp index 9b71992a6..a7453c233 100644 --- a/src/modules/m_samode.cpp +++ b/src/modules/m_samode.cpp @@ -40,6 +40,12 @@ class CommandSamode : public Command CmdResult Handle (const std::vector& parameters, User *user) { this->active = true; + User* target = ServerInstance->FindNick(parameters[0]); + if ((target) && (target != user)) + { + if (!user->HasPrivPermission("users/samode-usermodes", true)) + return CMD_FAILURE; + } ServerInstance->Parser->CallHandler("MODE", parameters, user); if (ServerInstance->Modes->GetLastParse().length()) ServerInstance->SNO->WriteGlobalSno('a', user->nick + " used SAMODE: " +ServerInstance->Modes->GetLastParse()); -- cgit v1.2.3