bbedward / beatrice Goto Github PK

Currently you can bypass actually having an admin role in the banano server by adding Beatrice to your own server, and creating a role with the same name as an admin role, allowing you access to !addpup, !removepup, !addmeow, !removemeow, !addfridge, !removefridge, !addmeme, !removememe.

1. admin_roles inside settings.py should be role IDs not role names.
2. Change

   Beatrice/main.py

   Line 268 in b099caa

   if r.name in settings.admin_roles:

   to if r.id in settings.admin_roles:

Or make the bot private. Probably was meant to be.

EDIT: Another side effect is despite muzzling being server specific due to roles, you can muzzle yourself in the database of silenced users whilst unmuzzled in the Banano server, and then become immune to the !muzzle command until you are !unmuzzle+!muzzle again.

There is a strange absence within the price charts. The value of banano is reflected in Nano, BTC, USD, and VES yet- strangely- the most important metric of all is missing:

My issue, my suggestion- add to the list of prices the most important metric for the Banano community;

Price (BAN) : 1 BAN

(also, sorry if theirs a better way to make this request. No bloody idea how to use GitHub but there is a BURNING DESIRE in my soul to at least throw out the suggestion)