Skip to content

feat: temporary privilege escalation for staff #6

@Vuks69

Description

@Vuks69

Idea

A time based temp admin feature.

This would allow normal accounts to have less perms in practice (think of it like you would not want to daily drive a machine as root).

Relevant module

Administration or Moderation

Flow

  • [User] in a certain server staff group (like %wheel in NGL, the detail isn't hammered out) runs the command
    • Required "Reason" field
  • Bot sends a request to a designated channel where only [Approved] (again another role) people can vote/accept that request
    • Requester can not approve their own request
    • Configurable # of approvals required, >=1
  • User is given the privileged Discord role until one of the following happens:
    • A configurable amount of time passes
    • User runs a command to end their privilege escalation early
    • An Approved user runs a command to end the privilege escalation early
      • This could be extended to less-privileged roles, so that there are more hands able to stop a rogue user
  • Bot removes the privileged role from the user

Security concerns

This should probably not be used for the Administrator permission, as it is extremely powerful - damage can be done even with Wick's antinuke.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions