How to stop griefing (not using CoreProtect and such)

[KudaXD]

So,

My server was griefed using world edit and stuff and somehow they gained access to luckperms. Is there any plugin thats able to rollback the entire server (even plugins and shit)
I've seen servers like OPLegends and WildPrison not being griefed and I'm just curious how they do it. The host I'm using with ptero doesnt have automatic backups so I don't know what to do. Please lmk how I can prevent griefers from gaining access to things and being able to possibly rollback plugins without doing server side backups on the panel

 

[cameronbowe]

Backups are crucial, as well as you may wanna look deeply into your logs or something on how they obtained access to your permission system. All large scale networks have 2fa or security measures of some sort and don’t allow such simple access to their things.

 

[KudaXD]

Backups are crucial, as well as you may wanna look deeply into your logs or something on how they obtained access to your permission system. All large scale networks have 2fa or security measures of some sort and don’t allow such simple access to their things.

Is there a way to add 2fa to luckperms and stuff like that?

 

[cameronbowe]

Is there a way to add 2fa to luckperms and stuff like that?

Nope- but a plugin can easily do that upon staff connections and I do suggest making it so access to any default minecraft commands like op and such can only be ran via console (use permission negations).

 

[KudaXD]

Nope- but a plugin can easily do that upon staff connections and I do suggest making it so access to any default minecraft commands like op and such can only be ran via console (use permission negations).

Where do I do the permission negations

 

[cameronbowe]

Where do I do the permission negations

You would do something like “/luckperms group default permission set bukkit.command.(name) false” etc, pretty simple just gotta figure out what you wanna do.

 

[KudaXD]

You would do something like “/luckperms group default permission set bukkit.command.(name) false” etc, pretty simple just gotta figure out what you wanna do.

So I have a /crates command. How would I block /crates give ?

 

[cameronbowe]

So I have a /crates command. How would I block /crates give ?

Read into your crates plugin’s documentation and figure out what permission for what sub-command you need to negate and follow the format I gave you (but don’t do bukkit.command) just do the permission you wanna negate.

 

[KudaXD]

Read into your crates plugin’s documentation and figure out what permission for what sub-command you need to negate and follow the format I gave you (but don’t do bukkit.command) just do the permission you wanna negate.

But if a player gets * permissions on the server, does the negate still work or nah? Cuz theres no point in doing that if they can just get * perms and do it again

 

[cameronbowe]

But if a player gets * permissions on the server, does the negate still work or nah? Cuz theres no point in doing that if they can just get * perms and do it again

If you give a player star permissions it will override everything rank and permission wise unless the negations are directly done to them- that’s why I suggest only doing it through ranks, which with them it will only override if the rank is higher weighted than the other rank (or if it’s the same rank).

 

[KudaXD]

If you give a player star permissions it will override everything rank and permission wise unless the negations are directly done to them- that’s why I suggest only doing it through ranks, which with them it will only override if the rank is higher weighted than the other rank (or if it’s the same rank).

Then theres really no point. They can easily get by this and its not very helpful. If there was a plugin that you can add a list of negated commands like this:

NEGATED-COMMANDS:

• crates give
• mcrates give
• op
• lp
• luckperms
• luckperm

kind of like that

 

[cameronbowe]

Then theres really no point. They can easily get by this and its not very helpful. If there was a plugin that you can add a list of negated commands like this:

NEGATED-COMMANDS:

• crates give
• mcrates give
• op
• lp
• luckperms
• luckperm

kind of like that

??? If you negate specific permissions it won’t be override by wildcards if I recall, all you have to do is read documentation on LuckPerms loo