Players can place and activate end crystals with visitor permissions which could lead to peoples worlds being destroyed.
Linked issues
is duplicated by 1
Comments 7
Confirmed in 1.14.1 on Windows 10. Players with Visitor permissions (or for whom the Build permission is toggled off) can nevertheless place an End Crystal on Bedrock, in either Creative or Survival mode.
Steps to reproduce:
Create a world with default game mode Creative and enter it.
Place a block of bedrock on the ground.
Place an end crystal in your inventory.
Change your game mode to Survival.
Change your permissions level to Visitor.
Try to place the end crystal on the bedrock.
Expected results:
You are not able to place the end crystal, because you do not have Build permission as a Visitor.
Actual results:
The end crystal is placed.
Thank you for your report!
However, this issue has been temporarily closed as Awaiting Response
Is this still an issue in the latest version? If so, please make sure the ticket description contains the following information:
Steps to Reproduce:
1.
2.
3.Observed Results:
(Briefly describe what happens)Expected Results:
(Briefly describe what should happen)
If your ticket does not look like the example given here, then it's likely to be closed as incomplete.
This ticket will automatically reopen when you reply.
Quick Links:
📓 Issue Guidelines – 💬 Mojang Support – 📧 Suggestions – 📖 Minecraft Wiki
Previously I had verified that a player with Visitor permissions could place an end crystal, but I didn't mention whether they could make it explode, which is relevant since the issue is described as griefing.
I have now tested this in 1.17.30, as both the host (changing my permissions to Visitor) and as an invited player on LAN receiving Visitor permissions. In both tests, I was not able to craft an end crystal, but if I was given one and was near a block of bedrock, I could place it and activate it to cause an explosion.
However, I have my doubts whether placing an end crystal constitutes "building". It would seem that Mojang doesn't classify it that way, given that it's allowed without Build permission. Furthermore, a player with only Visitor permissions would either have to have another player give them an end crystal, or would have to have one in their inventory that they built at an earlier time, when they had Member permissions.. So it's kind of hard to see what kinds of use cases exist where this issue is actually a problem that wouldn't be better solved by kicking or banning.
I had found it pretty easy to access end crystals when the world is set to creative but with visitor permissions as default. Flat worlds can be very easily affected due to the giant area of bedrock underneath everything and the blast radius of the crystal exposing more bedrock
@unknown: Once a report has an ADO number, that means the devs have entered it into their bug tracker, so any further updates to the bug's description or other details risk getting the report and ADO incident out of sync. It's the job of the mods to watch for additional important information and bring it to Mojang's attention if in our judgment it's likely to be relevant, or otherwise to suggest that the commenter should make a separate report of it. Therefore, we generally don't grant requests to change the report owner.
If there's something you're unable to change and you think it's important or useful for helping the devs find and fix the problem, the appropriate way to request it is to put it in a comment. If we agree, we might make the change you request and/or inform Mojang.
I recommed a very scuffed and temporary fix by just clearing their inventory if you want to keep them in creative but a better war is just putting them in survival. Sorry for the scuffed comment cause you most likely knew this already but it is all i can think of.