We've split up the commands, scripting and mods, and add ons category! Please be sure you get your thread in the right place.

← Commands
6
Follow

Gamerule for BlockEntityTag in Survival

As a security measure, the BlockEntityTag held in an item will be wiped when a non-creative player attempts to place it as a block.

For example, if a player in survival places a Spawner that has NBT tags to make it a Cow spawner, it gets turned into a Pig spawner as pig spawners are the default state of a spawner. This is to prevent players from getting their hands on spawners that spawn Command Minecarts which can execute OP commands. However, if this was gamerule controlled, then both map makers and small server owners who don't have to worry about a hacking problem would be able to implement these pre-configured NBT blocks as items for survival players to place.

All I want is /gamerule survivalBlockEntityTag. Keep it false by default, but allow us who know the consequences to set it to true.

Avatar
Registered User shared this idea

7 Comments

Please sign in to leave a comment.

Date Votes
Sorted by oldest
  • 0
    Registered User commented
    Comment actions Permalink

    What about banners?

  • 0
    Registered User commented
    Comment actions Permalink

    Disagree. You might as well make a allowEveryoneToBeOperator gamerule, since that's exactly what this would do. If your small server isn't worried about these consequences, just give everyone low operator perms and it will work fine right now.

  • 0
    Registered User commented
    Comment actions Permalink

    I don't get what the security issue is?

    If you're not op, then how do you get your hands on any spawner unless the server intentionally adds a method to give you one? In which case it's up to the server to manage that.

    And how on earth do you get hold of one that spawns command minecarts unless you're op? And even if you did get one, how do you enter a command into it if you're not op? If this is possible, then it's bug and should be fixed.

    I think custom spawners by default should be placeble by anyone, especially in single player survival - in which case you'd have to have cheats on or have some sort of spawner datapack.

    Then for those that need it add "gamerule doSpawnerPlace"

  • 0
    Registered User commented
    Comment actions Permalink

    In creative mode, the client has full control over the inventory and can generate arbitrary items out of thin air. The vanilla way to do this is using saved toolbars, but it's not the only way.
    If creative players were allowed to use whatever items they pleased, it's easy to see how they could run arbitrary commands. In fact, every block that is restricted is restricted precisely because it can be used to run arbitrary commands.
    So these blocks should be treated as equivalent to command access, and are thus restricted to operators.

  • 0
    Registered User commented
    Comment actions Permalink

    Ok but that seems like an issue with saved toolbars. I mean:

    1. Why do items not accessible from the creative menu load from a saved toolbar if you're not an operator?
    2. And shouldn't there be a black list for servers that allow them to configure that even more?

    These seem like important security and config requirement for servers, no mater what happens with spawners.

    What does "but it's not the only way" refer to though?

  • 0
    Registered User commented
    Comment actions Permalink

    I don't have any experience to justify this 100% but based on my testing I believe that if a player is in creative mode, op or not op, the blockentitytag from the spawner is used, so whether or not you're opped has nothing to do with this, we just want the ability to place them in survival, in which you case you should have no means of obtaining stupidly overpowered spawners in the first place.

  • 0
    Registered User commented
    Comment actions Permalink

    This absolutely needs to be an option. Please add this!