{
   "expand": "operations,versionedRepresentations,editmeta,changelog,renderedFields",
   "id": "292844",
   "self": "https://bugs.mojang.com/rest/api/2/issue/292844",
   "key": "BDS-3415",
   "fields": {
      "issuetype": "1",
      "project": "11700",
      "fixVersions": [],
      "resolution": "3",
      "customfield_10500": null,
      "customfield_12800": null,
      "customfield_12602": [],
      "customfield_12601": null,
      "customfield_12604": null,
      "customfield_12603": null,
      "customfield_12606": null,
      "customfield_12605": null,
      "customfield_12608": null,
      "resolutiondate": "2020-03-01T15:20:33.000+0200",
      "customfield_12607": null,
      "customfield_12609": null,
      "workratio": -1,
      "lastViewed": null,
      "watches": {
         "self": "https://bugs.mojang.com/rest/api/2/issue/BDS-3415/watchers",
         "watchCount": 3,
         "isWatching": false
      },
      "created": "2020-03-01T03:12:08.000+0200",
      "customfield_12000": null,
      "customfield_12201": null,
      "customfield_12600": null,
      "labels": [],
      "customfield_11700": "{}",
      "versions": [
         "18823"
      ],
      "issuelinks": [
         {
            "id": "162001",
            "self": "https://bugs.mojang.com/rest/api/2/issueLink/162001",
            "type": "10102",
            "outwardIssue": "288962"
         }
      ],
      "assignee": null,
      "updated": "2020-03-01T16:26:50.000+0200",
      "status": "5",
      "description": "*Players are currently able to have access to command block UI's who are not operators of the server.* This has caused several vanilla servers to shut down over the past month. Heck even a petition was made to tell mojang to fix this.\u00a0\n\n[https://www.ipetitions.com/petition/mojang-improve-realm-management-and-security]\n\nPlease fix this *OR* for gosh sake do all bds server owners a favor and add a /ban command. There is currently no way of stopping hackers from coming onto your server. Please fix this and please *don't have one of the mods mark this post as resolved* because its not resolved and needs to be dealt with.",
      "customfield_11100": null,
      "customfield_11300": null,
      "customfield_11500": null,
      "customfield_12503": null,
      "customfield_12700": null,
      "customfield_12502": null,
      "security": {
         "self": "https://bugs.mojang.com/rest/api/2/securitylevel/10318",
         "id": "10318",
         "description": "Private, viewable only by volunteers and up.",
         "name": "Minecraft - Private"
      },
      "customfield_12504": null,
      "attachment": [],
      "summary": "Players able to access command block UI using hacks",
      "creator": "infnitymaster18",
      "reporter": "infnitymaster18",
      "customfield_10002": null,
      "customfield_12501": null,
      "customfield_12500": null,
      "customfield_11601": null,
      "customfield_11600": "0|i18d5z:",
      "environment": null,
      "customfield_11801": null,
      "customfield_11800": null,
      "customfield_11602": null,
      "customfield_11802": null,
      "comment": {
         "comments": [
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/292844/comment/641516",
               "id": "641516",
               "author": "asowneryt",
               "body": "This is a huge problem that needs to be fixed",
               "updateAuthor": "asowneryt",
               "created": "2020-03-01T03:19:55.233+0200",
               "updated": "2020-03-01T03:19:55.233+0200"
            },
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/292844/comment/641569",
               "id": "641569",
               "author": "ionicecko",
               "body": "Hi Infinity,\n\nThe reason this would be marked as closed would be because the majority of it is Invalid. Feature requests belong over at https://feedback.minecraft.net as they're not a _bug_, its just a feature that isn't implemented yet. I would suggest checking over there for a suggestion about more admin possibilities (and for the record, I agree its needed - but we're also using what is clearly designated as \"alpha\" software so by definition its feature incomplete).\n\nHowever, if you're able to provide any more information on the comment about command blocks being accessible I'd be happy to get that one raised. Are there any special circumstances around it or is it just that any player of member permissions can access it?\n\nIs there a reason those servers can't barricade their command blocks off using barrier blocks as a workaround?\n\nIonic",
               "updateAuthor": "ionicecko",
               "created": "2020-03-01T05:17:55.033+0200",
               "updated": "2020-03-01T05:17:55.033+0200"
            },
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/292844/comment/641669",
               "id": "641669",
               "author": "lucy1337",
               "body": "It is a special circumstance, a Minecraft Bedrock \"Utility Mod\", named Horion. It is an extremely well-developed Cheat which has multiple exploits; just one of them being mentioned in this thread. If you had interpreted OP properly you would've realised he meant it wasn't something you could normally do in the game. Horion is internalised and can hook into many game functions, in the last month it has managed to have; force geometry, force obj and force open command block. This is all due to a lack of security in Microsoft's realm software. Only vanilla and realm servers are affected by this but they still make up a large amount of the multiplayer playerbase. There is certain workaround e.g putting the command block on a Minecraft and making it spin around endlessly. But it isn't efficient and shouldn't have to be done in the first place, OP wants a patch to this.",
               "updateAuthor": "lucy1337",
               "created": "2020-03-01T13:04:24.094+0200",
               "updated": "2020-03-01T13:04:24.094+0200"
            },
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/292844/comment/641673",
               "id": "641673",
               "author": "ionicecko",
               "body": "Thanks Lucy.\n\nWhen reporting hacks its best to report the issue as \"private\" (so others can't see it) so that you can include such information. Without it we can only take the report at face value, we can't be searching for subtext especially when we're volunteers going through hundreds of tickets a day. There are reports for that software already so I'll ask this to be linked to those.\n\nThank you both.\n\nIonic",
               "updateAuthor": "ionicecko",
               "created": "2020-03-01T13:24:37.567+0200",
               "updated": "2020-03-01T13:26:06.890+0200"
            },
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/292844/comment/641716",
               "id": "641716",
               "author": "ocelotonesie",
               "body": "MEQS_KEEP_PRIVATE",
               "updateAuthor": "ocelotonesie",
               "created": "2020-03-01T15:20:05.361+0200",
               "updated": "2020-03-01T15:20:05.361+0200",
               "visibility": {
                  "type": "group",
                  "value": "staff"
               }
            },
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/292844/comment/641717",
               "id": "641717",
               "author": "ocelotonesie",
               "body": "*Thank you for your report!*\nHowever, this issue is a {color:#FF5722}*Duplicate*{color} of *BDS-3142* (private).\n\n*Quick Links*:\n\ud83d\udcd3 [Issue Guidelines|https://bugs.mojang.com/projects/MCPE/summary] -- \ud83d\udcac [Community Support|http://hopper.minecraft.net/help/technical-support-resources/] -- \ud83d\udce7 [Customer Support|https://help.minecraft.net/hc/en-us/requests/new] -- \ud83d\udcd6 [Game Wiki|https://minecraft.gamepedia.com/Minecraft_Wiki]",
               "updateAuthor": "ocelotonesie",
               "created": "2020-03-01T15:20:33.991+0200",
               "updated": "2020-03-01T15:20:33.991+0200"
            },
            {
               "self": "https://bugs.mojang.com/rest/api/2/issue/292844/comment/641733",
               "id": "641733",
               "author": "infnitymaster18",
               "body": "IonicEcko if you look in my past reports on the bug tracker I did make a full detailed private post about hacks in bedrock edition and included links and info about what the hacks are capable of.\u00a0 Also I was not recommending a feature to be added. I made it very clear that players are able to open up command block UI's. The /ban command was just a suggestion but really I just want this issue to be taken care of.",
               "updateAuthor": "infnitymaster18",
               "created": "2020-03-01T16:23:41.969+0200",
               "updated": "2020-03-01T16:23:41.969+0200"
            }
         ],
         "maxResults": 7,
         "total": 7,
         "startAt": 0
      },
      "votes": {
         "self": "https://bugs.mojang.com/rest/api/2/issue/BDS-3415/votes",
         "votes": 4,
         "hasVoted": false
      }
   },
   "changelog": {
      "startAt": 0,
      "maxResults": 6,
      "total": 6,
      "histories": [
         {
            "id": "1453479",
            "author": "ocelotonesie",
            "created": "2020-03-01T15:20:05.387+0200",
            "items": [
               {
                  "field": "security",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": null,
                  "to": "10318",
                  "toString": "Minecraft - Private"
               },
               {
                  "field": "status",
                  "fieldtype": "jira",
                  "from": "1",
                  "fromString": "Open",
                  "to": "1",
                  "toString": "Open"
               }
            ]
         },
         {
            "id": "1453480",
            "author": "ocelotonesie",
            "created": "2020-03-01T15:20:34.007+0200",
            "items": [
               {
                  "field": "Link",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": null,
                  "to": "BDS-3142",
                  "toString": "This issue duplicates BDS-3142"
               }
            ]
         },
         {
            "id": "1453482",
            "author": "ocelotonesie",
            "created": "2020-03-01T15:20:34.135+0200",
            "items": [
               {
                  "field": "resolution",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": null,
                  "to": "3",
                  "toString": "Duplicate"
               },
               {
                  "field": "status",
                  "fieldtype": "jira",
                  "from": "1",
                  "fromString": "Open",
                  "to": "5",
                  "toString": "Resolved"
               }
            ]
         },
         {
            "id": "1453509",
            "author": "infnitymaster18",
            "created": "2020-03-01T16:18:56.897+0200",
            "items": [
               {
                  "field": "security",
                  "fieldtype": "jira",
                  "from": "10318",
                  "fromString": "Minecraft - Private",
                  "to": null,
                  "toString": null
               }
            ]
         },
         {
            "id": "1453513",
            "author": "infnitymaster18",
            "created": "2020-03-01T16:22:49.694+0200",
            "items": [
               {
                  "field": "Comment",
                  "fieldtype": "jira",
                  "from": "IonicEcko if you look in my past reports on the bug tracker I did make a full detailed private post about hacks in bedrock edition and included links and info about what the hacks are capable of.\u00a0 Also I was not recommending a feature to be added. I made it very clear that players are able to open up command block UI's. The /ban command was just a suggestion but really I just want this issue to be taken care of. This is a real issue and marking it as resolved will keep adding to the problem.\u00a0\n\nhttps://bugs.mojang.com/browse/BDS-2537\n\n\u00a0",
                  "fromString": null,
                  "to": null,
                  "toString": null
               }
            ]
         },
         {
            "id": "1453516",
            "author": "576874",
            "created": "2020-03-01T16:26:50.665+0200",
            "items": [
               {
                  "field": "security",
                  "fieldtype": "jira",
                  "from": null,
                  "fromString": null,
                  "to": "10318",
                  "toString": "Minecraft - Private"
               },
               {
                  "field": "status",
                  "fieldtype": "jira",
                  "from": "5",
                  "fromString": "Resolved",
                  "to": "5",
                  "toString": "Resolved"
               }
            ]
         }
      ]
   }
}