Files
simoleo89 67d2f52f64 fix(permissions): acc_supporttool incorrectly granted to VIP, denied to Super Mod
The default permission_definitions seed for acc_supporttool used the
pattern (0, 1, 1, 1, 1, 0, 1) across rank_1..rank_7 — apparently
shifted by two columns:

  * rank_2 (VIP) and rank_3 (X) had ALLOWED. With acc_supporttool=1
    the SecureLoginEvent path sends ModeratorInitMessageEvent on
    login, which makes the React client surface the ModTools toolbar
    button and let the user open room/user info windows. The actual
    sanction endpoints (ModToolSanctionBanEvent, ModToolWarnEvent,
    …) still gate on ACC_SUPPORTTOOL so a VIP cannot actually take
    moderator action — but they can request user info, room info
    and chatlogs they have no business reading.
  * rank_6 (Super Mod) was DISALLOWED, which is obviously not what
    the name says.

Corrected pattern: (0, 0, 0, 1, 1, 1, 1) — Support (4), Moderator
(5), Super Mod (6), Administrator (7). Matches the convention used
by the other staff-only acc_modtool_* keys.

Two changes:
  - Default Database/FullDatabase.sql: fix the seed for fresh
    installs.
  - Database Updates/004_fix_acc_supporttool_rank.sql: idempotent
    UPDATE to realign existing deployments.

Found by user report: a rank-2 (VIP) account on the live retro had
the ModTools button visible in the toolbar after login.
2026-05-20 20:34:37 +02:00
..
2026-03-06 15:26:53 +00:00

📢 Disclaimer

Please note that the files is provided as an educational resource for learning purposes only. The creators and contributors to those files are not responsible for any misuse or unintended consequences arising from the use of the files. By using those files, you agree to take full responsibility for your actions and any consequences resulting from your use of the files. It is your responsibility to ensure that you are using the files in compliance with all applicable laws and regulations.

This repository contains all the assets needed for your hotel to operate. More specifically it contains:

  • The default swf pack from krews
  • MyBoBBa catalogue assets
  • xlRaiko clothing pack
  • Converted assets for the nitro client

The MyBoBBa catalogue is created by https://devbest.com/members/puffin.80070/