Idea
A time based temp admin feature.
This would allow normal accounts to have less perms in practice (think of it like you would not want to daily drive a machine as root).
Relevant module
Administration or Moderation
Flow
- [User] in a certain server staff group (like %wheel in NGL, the detail isn't hammered out) runs the command
- Bot sends a request to a designated channel where only [Approved] (again another role) people can vote/accept that request
- Requester can not approve their own request
- Configurable # of approvals required, >=1
- User is given the privileged Discord role until one of the following happens:
- A configurable amount of time passes
- User runs a command to end their privilege escalation early
- An Approved user runs a command to end the privilege escalation early
- This could be extended to less-privileged roles, so that there are more hands able to stop a rogue user
- Bot removes the privileged role from the user
Security concerns
This should probably not be used for the Administrator permission, as it is extremely powerful - damage can be done even with Wick's antinuke.
Idea
A time based temp admin feature.
This would allow normal accounts to have less perms in practice (think of it like you would not want to daily drive a machine as root).
Relevant module
Administration or Moderation
Flow
Security concerns
This should probably not be used for the Administrator permission, as it is extremely powerful - damage can be done even with Wick's antinuke.