I agree, even the fc master could get hacked and having at least a one day requirement to a change could really limit losses and possible SE action.
Printable View
When they ask an officer for a withdrawal... couldn't the officer just be the one to withdraw the gil?
If someone needs X gil the officer can just hop over to any company chest, withdraw the X gil, trade it to them.
All without needing to monkey about in permissions or giving them temporary access to the whole vault.
I'm not sure it'll be a clear cut solution without other downsides, even on the suggestions made. And I think it's a problem that has long exists for game with guild banks.
For my FC, I restrict access to only the FC leader (me) and for my officers who're all picked because I've known them long enough and well enough to trust they would not abuse that power. I'll let people make donations but if an expense needs to be made out of the FC bank then they approach one of us. But normally it's only use that spends it because we tend to use the money for the FC. I think of it like having a treasurer.