Fixes permissions elevation exploit (#1930)

2017-07-07 12:35:17 -05:00
parent aac9c515ed
commit 29d2c7b980
2 changed files with 10 additions and 0 deletions
@@ -31,6 +31,11 @@ GLOBAL_PROTECT(admin_datums)
 	GLOB.admin_datums[ckey] = src

 /datum/admins/proc/associate(client/C)
+	if(IsAdminAdvancedProcCall())
+		var/msg = " has tried to elevate permissions!"
+		message_admins("[key_name_admin(usr)][msg]")
+		log_admin_private("[key_name(usr)][msg]")
+		return
 	if(istype(C))
 		owner = C
 		owner.holder = src