[Feature] Punishments can't be removed by lowest staff's ranks + revoke OWN punishment permissions

[Cr4zyGeek]

If an ADMINISTRATOR punished a player, then a MODERATOR can't revoke this punishment,
If a MODERATOR punished a player, then an HELPER can't revoke this punishment but an ADMINISTRATOR could do it

+ create permissions bm.command.[unbanip/unwarn/...].own for each punishment type

[confuser]

So the first request isn't possible. Bukkit's permission system does not allow for checking permissions of offline players.

The second is, I can add .own permissions for unbanning ip, dwarn etc

[Cr4zyGeek]

For the 1st, you could create a system of personalized permissions like bm.staff.<rank>
=> bm.staff.administrator / bm.staff.moderator / bm.staff.helper, then when someone is punished, the <rank> is stored in the database

In config you :
+ add the possibility to enable/disable the feature
+ create a category to define the rank order like :

staff-order-revoke: true

staff-order:
  - administrator
  - moderator
  - helper

and then if this feature is enabled, when someone wants to revoke someone's punishment, you check in the database the rank of the punisher compared to the actual bm.staff.<rank> of the player who wants to revoke the punishment

+ then it could be interesting to add the option to disable the possibility to staff members to revoke punishment applied by others staff members with the same rank :
like MODERATOR can't unban a player banned by an other MODERATOR

For the 2nd, it's exactly what i meant ^^

[Romvnly-Gaming]

How about relying on Vault to allow permission plugins that support checking offline players?

[Clarkcj12]

While., yes with default Bukkit it isn't really feasible to do. If you use API's from various Permissions Plugins such as LuckPerms, which has support and open API for Velocity, Bukkit/Spigot etc. It is possible using that API to find rank/permissions for a user, however it would likley require saving a user's UUID as a cached item, so it can submit that against the Permissin Plugin API's that way even if they change their username it will still be matched against UUID.