diff --git a/code/controllers/globals.dm b/code/controllers/globals.dm index 2a0f59597ca..d73b22afe75 100644 --- a/code/controllers/globals.dm +++ b/code/controllers/globals.dm @@ -37,6 +37,11 @@ GLOBAL_REAL(GLOB, /datum/controller/global_vars) stat("Globals:", statclick.update("Edit")) /datum/controller/global_vars/can_vv_get(var_name) + var/static/list/protected_vars = list( + "asays", "admin_log", "logging", "open_logging_views" + ) + if(!check_rights(R_ADMIN, FALSE, src) && (var_name in protected_vars)) + return FALSE if(gvars_datum_protected_varlist[var_name]) return FALSE return ..() diff --git a/code/controllers/subsystem/tickets/tickets.dm b/code/controllers/subsystem/tickets/tickets.dm index 74534da6cab..f8dca18fdb6 100644 --- a/code/controllers/subsystem/tickets/tickets.dm +++ b/code/controllers/subsystem/tickets/tickets.dm @@ -719,6 +719,13 @@ UI STUFF SSdbcore.MassExecute(all_queries, TRUE, TRUE, FALSE, TRUE) +/datum/controller/subsystem/tickets/can_vv_get(var_name) + var/static/list/protected_vars = list( + "allTickets" + ) + if(!check_rights(R_ADMIN, FALSE, src) && (var_name in protected_vars)) + return FALSE + return TRUE #undef TICKET_STAFF_MESSAGE_ADMIN_CHANNEL #undef TICKET_STAFF_MESSAGE_PREFIX diff --git a/code/datums/datumvars.dm b/code/datums/datumvars.dm index f389f04df60..01f30283dc2 100644 --- a/code/datums/datumvars.dm +++ b/code/datums/datumvars.dm @@ -14,7 +14,7 @@ /mob/can_vv_get(var_name) var/static/list/protected_vars = list( - "lastKnownIP", "computer_id" + "lastKnownIP", "computer_id", "attack_log_old" ) if(!check_rights(R_ADMIN, FALSE, src) && (var_name in protected_vars)) return FALSE @@ -22,7 +22,7 @@ /client/can_vv_get(var_name) var/static/list/protected_vars = list( - "address", "computer_id" + "address", "chatOutput", "computer_id", "connection", "jbh", "pm_tracker", "related_accounts_cid", "related_accounts_ip", "watchlisted" ) if(!check_rights(R_ADMIN, FALSE, mob) && (var_name in protected_vars)) return FALSE