If all clients have access to the group models API, what is stopping them from essentially just removing people from groups, changing roles etc. or are some of these methods for admins of the groups? Also. Is there a way to make group api only for the server and not clients? If not, can i have a list of all methods that are group-admin-only.. thanks!
You do not need to worry about this. Each group has its own roles and permissions. By default, only administrators can remove players or change roles. For more details, please see Entity Groups.
Is there a way to make group api only for the server and not clients?
As Group APIs are based on Entity Model, we cannot disable it for clients. But we can use title entity to create the group and add players as members. Then only server can modify the group. Clients can do nothing on the group except reading.
2 People are following this question.
