Open Inventory

🚀 OpenInv v1.0 – The Security Update

[Major Security Overhaul]

• Multi-Layered Permission Logic: Transitioned to a strict "Two-Key" system. Staff now require both the master openinv.modify key AND a target key (.inv or .ec) to edit items.
• Rank Exemption System: Introduced openinv.exempt.modify to allow Admins and Owners to protect their inventories from being edited by lower-ranking staff.
• Administrative Overrides: Added openinv.override.modify to allow trusted high-level staff to bypass modification exemptions.
• Bypass Permissions Hierarchy: Decoupled permission inheritance in plugin.yml to prevent accidental permission "leaks" from op status.

[Bug Fixes & Security Hardening]

• Shulker Viewer Lockdown: Fixed a critical security leak where staff could still edit items inside an Admin's Shulker Box even if the Admin was protected.
• Drag Interaction Security: Fixed a bug where clicking and dragging items could bypass modification checks.
• Inventory Synchronization: Resolved an issue where offline edits didn't always reflect perfectly during a high-speed login event.

[UX & Performance Improvements]

• Message Throttling: Implemented a 2-second cooldown on permission denial messages to prevent chat spam during failed interactions.
• Dynamic Console Logging: Updated system startup logs to automatically pull the correct version from plugin.yml (no more hardcoded version strings!).
• Clear Inventory Confirmation: Refined the safe-clear GUI to ensure accidental clicks don't result in lost data.
• Wildcard Support: Fully populated openinv.* and openinv.modify.* in the plugin.yml for easier permissions setup.

---